Hosting Provided By

Re: Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up.

From: Christine Kronberg <Christine_Kronberg(at)genua.de>
Date: Wed Aug 06 2003 - 12:06:55 EDT

On Tue, 5 Aug 2003, Drew Weaver wrote:

Nav finds a worm called W32/Lolol.worm.gen in juh.exe and dcomx.exe. It fits to what I saw when let the files run within a vmware. I'm not sure about the files in the cba directory. According to what I found with google there seems to be a link to NAV CE (at least to some antivirus software). Are you sure that they have not been there earlier?
(I'm not a windows expert: what are *.lrc files? )

Cheers,

                                                               Chris.

-- 
GeNUA mbH



---------------------------------------------------------------------------
----------------------------------------------------------------------------

Received on Wed Aug 6 19:40:53 2003

This message: [ Message body ]
Next message: Schmehl, Paul L: "RE: Secure.dcom.exe"
Previous message: Lee Seidman: "Backdoor.Trojan and payload.dat"
In reply to: Drew Weaver: "Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up."
In reply to Levinson, Karl: "RE: Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up."

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:02:15 EDT