[nsp-sec] Korea botnet actually deleting files?

[Jose Nazario]

saw it happen in our sandboxes with the flash.gif EXE samples. gzip, 
delete, poof.

heard reports directly from KRCERT that this was happening in their neck 
of the woods.

had been advising customers that a few subscribers may be calling in with 
"i can't boot" issues and this may be related.

-------------------------------------------------------------
jose nazario, ph.d.     	<jose at arbor.net>
manager of security research 	arbor networks
v: (734) 821 1427 	      	http://asert.arbor.net/