Full Disclosure mailing list archives
Re: Another noxious M$ trojan
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Thu, 20 Nov 2003 19:29:18 +1300
"Gregory A. Gilliss" <ggilliss () netpublishing com> wrote:
For all who were interested in reviewing the suspect binaries, I have posted them on my Web site:
Not at all smart -- this is self-replicating code which poses certain complexly more interesting ethical issues than simple vulnerability exploit PoC code... Anyway, despite the different .ZIP sizes (8 bytes being twice the four- character difference in length of filename...) the .EXEs are identical (as can be seen by the identical CRC-32 with unzip -v ...) and both straight samples of Swen.A... Regards, Nick FitzGerald _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Another noxious M$ trojan Gregory A. Gilliss (Nov 19)
- Re: Another noxious M$ trojan Valdis . Kletnieks (Nov 19)
- Re: Another noxious M$ trojan :-) (Nov 20)
- Re: Another noxious M$ trojan Bart . Lansing (Nov 20)
- <Possible follow-ups>
- Re: Another noxious M$ trojan Gregory A. Gilliss (Nov 19)
- Re: Another noxious M$ trojan Oliver Heinz (Nov 19)
- Re: Another noxious M$ trojan Nick FitzGerald (Nov 19)
- Message not available
- Re: Another noxious M$ trojan Gregory A. Gilliss (Nov 19)