Security Incidents mailing list archives
Unknown Malware found csdiv.dll
From: Sven Carstens <sven.carstens () blinker-links de>
Date: Tue, 29 Jun 2004 15:49:19 +0200
Hi list, a friend of mine caught some really pain in the ass piece of malware. As I didn't find any references to it via google, I'm posting a link, so the real experts out there have a new toy to play with. Malware http://www.demoserver.de/csdiv.dll_malware The file itself is not found by AdAware. But it seems after getting started it drops some well known other parts which are recognized and removed by AdAware. The csdiv.dll is started on starting IE via an url like res://csdiv.dll/index.html# Anyway I didn't find the injection point in the registry and searching all files on disk for the dll name brought nothing at all. What it found was some logfiles, dated on 2004-06-28 (same date as the dll). These seem to be some installer logfiles. Logfile http://www.demoserver.de/logfile_malware CU Sven
Current thread:
- Unknown Malware found csdiv.dll Sven Carstens (Jun 29)
- Re: Unknown Malware found csdiv.dll Jim Halfpenny (Jun 29)
- Re: Unknown Malware found csdiv.dll Harlan Carvey (Jun 29)
- Re: Unknown Malware found csdiv.dll Harlan Carvey (Jun 29)
- Re: Unknown Malware found csdiv.dll Valdis . Kletnieks (Jun 29)
- Re: Unknown Malware found csdiv.dll Jordan Wiens (Jun 29)
- <Possible follow-ups>
- Re: Unknown Malware found csdiv.dll Sven Carstens (Jun 30)
- Re: Unknown Malware found csdiv.dll Jim Halfpenny (Jun 29)