[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <e024ccca0607171427i2f0ef612rfa5d56ca42b43317@mail.gmail.com>
Date: Mon Jul 17 22:27:39 2006
From: dudevanwinkle at gmail.com (Dude VanWinkle)
Subject: Using Magic Values along with filetype to find malicious files
(was RE: Google Malware Search)
On 7/17/06, Debasis Mohanty <debasis.mohanty.listmails@...il.com> wrote:
> Nice .. Realy nice pointers H.D. !! :)
Really nice pointers yourself!
By searching for:
site:.il signature: 00004550 filetype:pif
I find a site with badtrans.b
www.arava.co.il/matan/svgalib/hypermail/att-1469/01-fun.MP3.pif
Hmm, any bets on who is the most infected TLD... :-)
-JP<who is betting on .ru>
Powered by blists - more mailing lists