Thanks for all the replies, Someone has contacted me -- Tristram Cheer Network Architect - Most problems are the result of previous solutions... Tel. 09 438 5472 Ext 803 | Mobile. 022 412 1985 | 53 Port Road, Whangarei tristram.cheer(a)ubergroup.co.nz mailto:tristram.cheer(a)ubergroup.co.nz |www.ubergroup.co.nz http://www.ubergroup.co.nz http://ubergroup.co.nz/fb https://twitter.com/#!/ubergroupltd From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Tristram Cheer Sent: Thursday, 9 February 2012 2:09 p.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] BotNet Researchers in NZ Hi All, We have a quarantined client server that is part of a botnet, We've got the files it's using aswell as a HDD image. I thought I would post here and see if there are any security folk in NZ that would like to take a look at it, I've had a dig at the server and we have it's com's systems etc etc. Anyone who interested that's either an academic or security researcher that would like to take a look at it is welcome to e-mail me offlist. Cheers -- Tristram Cheer Network Architect - Most problems are the result of previous solutions... Tel. 09 438 5472 Ext 803 | Mobile. 022 412 1985 | 53 Port Road, Whangarei tristram.cheer(a)ubergroup.co.nz mailto:tristram.cheer(a)ubergroup.co.nz |www.ubergroup.co.nz http://www.ubergroup.co.nz http://ubergroup.co.nz/fb https://twitter.com/#!/ubergroupltd