Unfortunately one has to say. Not to long ago we had a PC infected with a worm that phoned home to a particular IRC Server, specific channel (glad that IRC uses clear text so i could sniff the password as well).
I logged on to the channel, waited as everything was quite. Suddenly moderator comes in and all Zombies start to scan and attack other Networks on the Internet, i do the usual whois on the moderator and then forwarded all info to the authorities. Next day that ominous IRC Server was down and was never seen again. So yes i can only recommend to check for these home-calls after an infection and to report everything to the police or whatever organization is responsible in your country.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/246/26674#26674