Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
[Full-disclosure] RE: New Worm?
From: Dan Bambach (Dandbambach.net)
Date: Tue Aug 09 2005 - 11:47:45 CDT
I did, and the result was it's a known worm as of 8-8-2005. Symantec now has
updated information on this and should detect it in their defs on the 8-10.
It's worth submitting it to http://virusscan.jotti.org
<http://virusscan.jotti.org> as well.
From: full-disclosure-bounces at lists.grok.org.uk
[mailto:full-disclosure-bounces at lists.grok.org.uk] On Behalf Of Dan
Sent: 09 August 2005 16:34
To: full-disclosure at lists.grok.org.uk
Subject: [Full-disclosure] New Worm?
I was "blessed" with an email that had a ZIP file attached called
Beach.zip. The executable that was enclosed is called foto_bs363.exe. Is
this a new one? A google search comes up blank, a yahoo search came up
with one hit, www.symantec.com/avcenter/venc/data/pf/trojan.tooso.k.html
Interesting that when I sent it through VirusTotal, Symantec did not
report anything and my Symantec does not detect any issues with it.
Right now I have no way of testing this file, so anyone interested in
it, let me know and I'll send it to you.
-------------- next part --------------
An HTML attachment was scrubbed...
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/