lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
From: pappgeza at tolna.net (Papp Geza)
Subject: Outbreak warning: possibly Mydoom.C

Hello,

Yes - this is two worm, that use the Mydoom backdoor`s. This is not
"binaris" and not is .zip archive.

This twoo worm are hexa. and is padked to UPX. My attachement picture
from worm W32/Doomjuice.worm.a,aliases: W32.HLLW.Doomjuice, WORM_DOOMJUICE.A,
Win32.Doomjuice.A, Worm.Win32.Doomjuice

>From second worm i`have not pitures, but description...

The worm is comlex. W32/Deadhat-A
Aliases :
Win32.Vesser.A, W32.HLLW.Deadhat, Vesser, W32/Vesser.worm.a


-- 
?dv?zlettel,
  Geysap                             mailto:pappgeza@...na.net

www.gyik.com
"VIRUS CORE TEAM"
====================================
Fiat justitia, pereat mundus!
------------------------------------
we protect your digital worlds... 
====================================

















 

 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: malw.png
Type: image/png
Size: 81434 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040210/40df04a5/malw.png

Powered by blists - more mailing lists