nanog mailing list archives
Re: Trojan Alert was: Check this
From: "Steven M. Bellovin" <smb () research att com>
Date: Thu, 09 Mar 2000 16:00:34 -0500
In message <4.2.2.20000309152159.00d31ea0 () mail speedus net>, Kai Schlichting wr ites:
Can someone with a lucky hand in Visual Basic actually tell us what the trojan attachment we saw (LINKS2.VBS) we saw (full mail headers included, in case Shawn hasn't seen them yet) actually does. Seems to cloak itself well, and my Norton AV is *not* detecting anything.
There was a report on Bugtraq the other day that some AV programs don't look at .VBS files. You may have to select 'check all files' or at least add .VBS to your list of extensions to scan. --Steve Bellovin
Current thread:
- Trojan Alert was: Check this Kai Schlichting (Mar 09)
- Re: Trojan Alert was: Check this I did geektools owns Henry R. Linneweh (Mar 09)
- Re: Trojan Alert was: Check this Kevin Houle (Mar 09)
- Message not available
- Re: Trojan Alert was: Check this Kai Schlichting (Mar 09)
- OT: VBS.FREELINK and Anti-Virus Defaults was: Check This David Kennedy CISSP (Mar 09)
- Re: Trojan Alert was: Check this Chris Brenton (Mar 09)
- <Possible follow-ups>
- Re: Trojan Alert was: Check this Steven M. Bellovin (Mar 09)
- Re: Trojan Alert was: Check this Hermann Wecke (Mar 09)