[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <10c6adab0503020848357f3b47@mail.gmail.com>
From: carlos.ulver at gmail.com (Carlos Ulver)
Subject: New virus?
Can you send a copy for me?
Maybe i can make a reverse engineering and try to help you what?s happening...
On Wed, 2 Mar 2005 16:05:06 +0000, Matthew Burling
<matthewb@...elrys.com> wrote:
>
> Floods the network with DCOM packets
>
> Infected files include:
>
> C:\windows\system32\dxmsrv.exe
> C:\windows\system32\winmes.exe
>
> These aren't yet detected by Symantec 1/3/2005 rev. 21
>
> Doesn't infect a fully patched Windows PC
>
> Does anyone have any ideas?
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
>
>
--
Carlos A. Ulver.
Home: www.debarry2.com.br/carlos
PGP: www.debarry2.com.br/carlos/contato.htm
Brasil - MG
Powered by blists - more mailing lists