Full Disclosure mailing list archives

New virus?


From: Matthew Burling <matthewb () accelrys com>
Date: Wed, 2 Mar 2005 16:05:06 +0000

Floods the network with DCOM packets

Infected files include:

C:\windows\system32\dxmsrv.exe
C:\windows\system32\winmes.exe

These aren't yet detected by Symantec 1/3/2005 rev. 21

Doesn't infect a fully patched Windows PC

Does anyone have any ideas?
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread: