Focus on Virus Mode:
(Page 17 of 63)  < Prev  12 13 14 15 16 17 18 19 20 21 22  Next >
Does anyone know much about "Exploit.HTML.MHTRedir-8"? 2005-08-05
Billy (billy laggui com) (1 replies)
Hi all!

We have a WinNT4 server that is running DNS for our WAN.
Lately, it seems that our users who are browsing are being redirected
elsewhere.
A preliminary check of the system using Norton AV 2003 (fully-updated, of
course) revealed no infections, but a scan with ClamAV (20050725, also
fully

[ more ]  [ reply ]
Re: Does anyone know much about "Exploit.HTML.MHTRedir-8"? 2005-08-05
Simon Borduas (sborduas hypertec ca)
R: Strange and very small email - new virus 2005-07-27
Michele Nappa bipop it
This is the header of the same message I got

Return-Path: <michelenapoli@*.it>
X-Original-To: michelenappa@*.it
Delivered-To: michelenappa@*.it
Received: from Antigua-p2Dunnmayda.net (unknown [196.28.63.41])
by smtp-in2.email.it (Email.it) with SMTP id 6821EBC007
for <michelenappa@*.it>; Fri, 22

[ more ]  [ reply ]
Re: Strange and very small email - new virus 2005-07-27
Richard Stiennon (RStiennon webroot com)
Is someone harvesting email addresses for Spam or a future targetted attack? You are seeing the non bounced successful guesses?

Stiennon
--------------------------
Sent from my BlackBerry Wireless Handheld

-----Original Message-----
From: Joseph (Joe) Lynn <Joe.Lynn (at) tiniusolsen.co (dot) uk [email concealed]>
To: jiggl

[ more ]  [ reply ]
RE: Strange and very small email - new virus 2005-07-27
Joseph (Joe) Lynn (Joe Lynn tiniusolsen co uk)
Hi all,

We are receiving similar emails...

My Outlook reads the attachment as 91 bytes.

When you extract the attachment however, it shrinks to 2 bytes.
When opened in Notepad, there is no data inside.

It is very strange, as I can't see how a virus like this would spread -
even if it is a failed

[ more ]  [ reply ]
RE: Strange and very small email - new virus 2005-07-27
Jefferies, Darren (Darren Jefferies health wa gov au)
Hi all, staff where I work recieved a lot of E-Mails like these a number of years ago so I submitted a sample to our antivirus supplier. They found these to be the result of an antivirus system doing an incomplete job of removing a virus during the E-Mails transit. These may possibly be the same t

[ more ]  [ reply ]
RE: Strange and very small email - new virus 2005-07-26
Tim Myers (tmyers coactivesys com) (1 replies)
This information is unconfirmed but it was reported that the email was
sent from computers infected with the bagel Trojan.

Below is a google cache of isc.scans.org, had to use the cache since the
diary was already updated with new content.

http://64.233.167.104/search?q=cache:CTOjLghWLKcJ:isc.sans

[ more ]  [ reply ]
Re: Strange and very small email - new virus 2005-07-27
- (bkporter gmail com)
Re: Strange and very small email - new virus 2005-07-26
jiggly janottaherner com (1 replies)
Yes, we have gotten about 2 of these types of emails. The file is a named 1.txt (61 Bytes in size) and the email subject is "1". We are a company with about 35 email addresses under our domain and have received viruses through some of them in the past. This strange email has come to 2 of our acco

[ more ]  [ reply ]
Re: Strange and very small email - new virus 2005-07-26
Baruch Ben-David (baruch blessedb org)
Re: Strange and very small email - new virus 2005-07-25
iwillregistersoon email com
I have seen many of these emails as well. No idea what the cause is. I can only think of some sort of spam bot that someone is testing??

[ more ]  [ reply ]
Strange and very small email - new virus 2005-07-23
security-list hacktrack com
Hi All,

our antivurs firewalls detects very strange activities in transfered
emails..

Emails have attachement "1.txt" and subject "1". Emails come to real
mailbox and some generict mailbox to many domains (com,at,cz and much
more) hosted on our servers in USA, Europe, Czech republic, Japan, Austra

[ more ]  [ reply ]
Re: generic detection (A few links) 2005-07-08
Olaf Reitmaier Veracierta (olafrv gmail com)
All viruses has numerous modified versions, malicious people modify
them to avoid its extiction
(http://www.symantec.com/avcenter/reference/striker.pdf).

Symantec uses a heuristical engine
(http://www.symantec.com/press/2002/n020320.html) to find out virus
ocurrences. This process consist to co

[ more ]  [ reply ]
RE: generic detection 2005-07-07
Kumra, Vipul (vkumra ipolicynetworks com)
Hi Salim,

I'll try to explain one of the many reasons which are behind this:

xyz1_Worm pattern 111111a:
xyz2_Worm pattern 111111b:
xyz3_Worm pattern 111111c:
xyz4_Worm pattern 111111d:
xyz5_Worm pattern 111111e:

Given the above scenario, I can choose to write 5 different (specific) sign

[ more ]  [ reply ]
generic detection 2005-07-07
Hussain Salim (bo_ali90 hotmail com) (1 replies)
hi,
i want to know somenthing about generic detecion for example symantec detect
some viruses and trojans as trojan.horse or backdoor.trojan why? why don't
they detect them as a special name to know more information about them to
fix what they do and thx.

im asking this question because i got ma

[ more ]  [ reply ]
Re: generic detection 2005-07-07
Marius Huse Jacobsen (mahuja c2i net)
RE: HELP WITH VIRUS DETECTES 2005-06-17
Alan Monaghan (AlanM Gardnerweb com)
>> -----Original Message-----
>> From: Alexis Villagra - VILSOL LatinAmerica [mailto:alexis (at) vilsol (dot) com [email concealed]]
.....
>> NIMDA - the antivirus ESET NOD32 detects but it says taht it can not
>> remove.
>> win32/Agent.AYTroyan - the antivirus ESET NOD32 detects but it says taht
>> it
>> can not remove.
>> New

[ more ]  [ reply ]
HELP WITH VIRUS DETECTES 2005-06-17
Alexis Villagra - VILSOL LatinAmerica (alexis vilsol com) (2 replies)
Dear List,

I have the following:

NIMDA - the antivirus ESET NOD32 detects but it says taht it can not remove.
win32/Agent.AYTroyan - the antivirus ESET NOD32 detects but it says taht it
can not remove.
NewHeur_PE - the antivirus ESET NOD32 detects it in the operating memory but
it says that it can

[ more ]  [ reply ]
Re: HELP WITH VIRUS DETECTES 2005-06-17
Fernando Amatte (famatte gmail com)
RE: HELP WITH VIRUS DETECTES 2005-06-17
Prashant Meswani (prashant meswani ukonline co uk)
new msn worm from http://www.pearljamtribute.com/ 2005-06-14
MaNiNWhite (maninwhite tpg com au)
sends to every user on MSN list

Asks why user email is on the "staff" page

http://www.pearljamtribute.com/staff.php?YOUREMAILHERE

sends an msdos UXE (was not brave enough to run it myself) that i assume
is a trojan/worm dropper.

can somebody please track this down and take that server offline b

[ more ]  [ reply ]
Window of exposure lets viruses run rampant 2005-06-09
lsi (stuart cyberdelix net)
[Home users and small businesses can block ALL messages with
executable attachments too. Here's how to do it with Spampal, a free
anti-spam program for Windows:

http://www.spampalforums.org/phpBB2/viewtopic.php?t=6286

...yes, a spam filter can be used to block viruses! - Stu]

http://www.thereg

[ more ]  [ reply ]
Administrivia: SecurityFocus.com new look 2005-06-02
Marc Fossi (mfossi securityfocus com)
Hey everyone,

Just wanted to let you all know that the SecurityFocus website has a new
look to it in response to reader feedback and suggestions. I encourage
you to take a peek if you haven't already.

http://www.securityfocus.com

If you have any comments on the new look, please send them to
rede

[ more ]  [ reply ]
Spam exploiting MS05-016 2005-05-29
Nick FitzGerald (nick virus-l demon co uk)
Yesterday at least two of my spam-traps received the following message
(I've elided the MIME boundary values just in case...):

Subject: We make a business offer to you
MIME-Version: 1.0
Content-type: multipart/mixed;
boundary="[...]"

[...]
Content-Type: text/plain;

[ more ]  [ reply ]
RE: AV that supports spy/adware 2005-05-09
Douglas Schlachta (Sr. Infrastructure Security Analyst) (DouglasSchlachta cplodges com)

Yes Spybot is a good one for the home user.
This is also the only place it is meant to be free, if you are using it
in a corporate environment then you are going against the ULA.

If you pay for the use of it then yes it is a possible solution.
Could you point out this new admin suite as I am unabl

[ more ]  [ reply ]
Re: AV that supoprts spy/adware 2005-05-06
dave_mikesch baxter com
We use SAV 9. It deletes about 15-20% of the spyware it finds.

Try Bluecoat.com

They have a combo appliance setup using ProxySG and ProxyAV.

It stops almost all of it before it even *installs* on your machines.

Very inovative concepts they have, imho.

Best Regards,

Dave Mikesch
Security Oper

[ more ]  [ reply ]
(Page 17 of 63)  < Prev  12 13 14 15 16 17 18 19 20 21 22  Next >


 

Privacy Statement
Copyright 2010, SecurityFocus