[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-Disclosure] New virus?

To: full-disclosure@xxxxxxxxxxxxxxxx
Subject: [Full-Disclosure] New virus?
From: Matthew Burling <matthewb@xxxxxxxxxxxx>
Date: Wed, 2 Mar 2005 16:05:06 +0000

Floods the network with DCOM packets

Infected files include:

C:\windows\system32\dxmsrv.exe
C:\windows\system32\winmes.exe

These aren't yet detected by Symantec 1/3/2005 rev. 21

Doesn't infect a fully patched Windows PC

Does anyone have any ideas?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Follow-Ups:
- Re: [Full-Disclosure] New virus?
  - From: Thierry Zoller
- Re: [Full-Disclosure] New virus?
  - From: stephane nasdrovisky
- Re: [Full-Disclosure] New virus?
  - From: Carlos Ulver

Prev by Date: Re[2]: [Full-Disclosure] Things that make you go "Hmmm"
Next by Date: Re: [Full-Disclosure] Things that make you go "Hmmm"
Previous by thread: [Full-Disclosure] [FLSA-2005:2127] Updated CUPS packages fix security vulnerabilities
Next by thread: Re: [Full-Disclosure] New virus?
Index(es):
- Date
- Thread