full-disclosure - SDbot Virus

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Sat Apr  2 10:05:20 2005
From: Thierry at sniff-em.com (Thierry Zoller)
Subject: SDbot Virus

Dear Jeffry Bilder,

Upload it here:
http://virusscan.jotti.org

Also the sandbox from NORMAN [1] will help you a great deal with
"analysis", it tells you the IRC server, room, password and name
your exe was configured to use. I met some nice poeple using that
method ;)

[1]
http://sandbox.norman.no/live_4.html

-- 
Thierry Zoller