Full Disclosure mailing list archives
Re: (no subject)
From: Michael Erdely <mike () erdelynet com>
Date: Mon, 09 Aug 2004 16:07:02 -0400
ClamAV calls it Trojan.JS.Runme. My update for it came at 3 PM EDT today. From ClamAV Update list:Submission: 5025-web, 5026-web, 5027-web, 5028-web, 5029-web, 5030-web, 5043-web, 5044-web,
5045-web, 5046-web, 5047-web, 5048-webSender: James Stevens, Bill Landry, Henning Spjelkavik, Melanie Dussiaume, Roman Scheucher, Gunter Mintzel, Mike Watterson, Martin, Rob Kudyba, wojciech myszka, Philip Corliss, Kevin Way Virus: unknown, JS/IllWill (McAfee), JS.Dword.dropper (Bitdefender), JScript/IE.VM.Exploit (Inoculate)
Alias: TR/RunMe.Dldr.1 (Hbedv) Added: Trojan.JS.RunMe Added: Trojan.RunMe Note: The name may change.Note: There are more submissions with this; at the moment I'm publishing just some of them.
-Mike Jonathan Grotegut wrote:
(In regards to new_price.zip file attachment) Anyone have any idea what this is, we had some clients just get pretty hard with this email. I am unable to find anything on it, from my VERY Limited knowledge it appears to be a virus exploiting one of the many holes in IE. Anyone else see anything on this yet? Jonathan Grotegut _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: (no subject) spoofed addresses still confuse many..., (continued)
- RE: (no subject) spoofed addresses still confuse many... Todd Towles (Aug 09)
- Re: (no subject) joe smith (Aug 09)
- Re: (no subject) Micheal Espinola Jr (Aug 09)
- Re: (no subject) Michael (Aug 09)
- Re: (no subject) Bob Kehr (Aug 09)
- RE: (no subject) Bart . Lansing (Aug 09)
- Re: (no subject) Micheal Espinola Jr (Aug 09)
- RE: (no subject) Shannon Johnston (Aug 09)
- RE: (no subject) Eric Paynter (Aug 09)
- Re: (no subject) Dave King (Aug 09)
- Re: (no subject) Michael Erdely (Aug 09)
- Re: (no subject) van Helsing (Aug 09)
- Re: (no subject) Tremaine (Aug 09)
- Re: New virus Alan J. Wylie (Aug 09)
- RE: (no subject) Corey Hart (Aug 09)
- (no subject) Dufresne (Aug 09)
- RE: (no subject) Seamus Hartmann (Aug 09)
- RE: (no subject) Stephen Agar (Aug 09)
- RE: (no subject) Todd Towles (Aug 09)
- RE: (no subject) Michael Poulin - Home Office (Aug 09)
- Re: (no subject) tcleary2 (Aug 10)
(Thread continues...)