Misc notes on stuff found on the internet.

This is a "notes to self and to anyone else who happens to read it" page.

I wrote it because none of the search engines had any data on these particular subjects before 2001 (or thereabouts).

If you do a search for "lomscan.exe" or any of the other programs you might find after your windows machine has been compromised, you'll find no real information on what this or the accompanying programs do.

Most of this info has been gleaned from disassembling these little pieces of code -- thanks to mael(at)bogus.net.

tn.exe	Telnet client
xy.exe	TCP traffic redirector
pipecmd.exe	Named pipe command shell
lomscan.exe	NETBIOS share scanner/brute forcer
lom.exe	Same as lomscan.exe, but with 90k of NUL's at the end with a changed PE header