Steve,
I'm dealing with what appears to be a new Zeus
variant and on a whim I
tried to run zeusscan2 under a copy of Volatility 2.0 I still hang onto.
Are you willing/able to share the md5 of that Zeus variant, please?
Cheers,
Stefan.
--
Stefan Kelm <skelm(a)bfk.de>
BFK edv-consulting GmbH
http://www.bfk.de/
Kriegsstrasse 100 Tel: +49-721-96201-1
D-76133 Karlsruhe Fax: +49-721-96201-99