RE: Blaster Variant - W32.Blaster.B.Worm

From: RSH @ Rogers (@)
Date: Wed Aug 13 2003 - 19:59:40 PDT

Next message: Arnold, Jamie: "[Full-Disclosure] RE: new msblaster on the loose?"

Previous message: edelweiss: "Re: Tools for monitoring port scans / connection attmempts?"
In reply to: Trent Dilkie: "Blaster Variant - W32.Blaster.B.Worm"
Next in thread: Bruce Martins: "RE: Blaster Variant - W32.Blaster.B.Worm"
Next in thread: Jordan Wiens: "RE: MSBLASTER Infecting despite 03-026 patch?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

F-PROT has reported two variants - both B and C - hours ago... and has
updated their signature files twice today as well.
www.f-prot.com for details

RSH
-----Original Message-----
From: Trent Dilkie [mailto:trentat_private]
Sent: Wednesday, August 13, 2003 12:44 PM
To: incidentsat_private
Subject: Blaster Variant - W32.Blaster.B.Worm


Symantec has discovered a variant of Blaster, details at:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.b.worm.h
tml

Similar to Blaster, but the executable is named penis32.exe

Have fun,
Trent


---------------------------------------------------------------------------
----------------------------------------------------------------------------



---------------------------------------------------------------------------
----------------------------------------------------------------------------

Next message: Arnold, Jamie: "[Full-Disclosure] RE: new msblaster on the loose?"
Previous message: edelweiss: "Re: Tools for monitoring port scans / connection attmempts?"
In reply to: Trent Dilkie: "Blaster Variant - W32.Blaster.B.Worm"
Next in thread: Bruce Martins: "RE: Blaster Variant - W32.Blaster.B.Worm"
Next in thread: Jordan Wiens: "RE: MSBLASTER Infecting despite 03-026 patch?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Aug 13 2003 - 20:00:59 PDT