Gooi het er af . Ren maandag naar de dichtstbijzijnde pcboer ne koop
Norton Internet Security. Te hoog gegrepen voor jou? Koop dan alleen
Norton Antivirus 2004.
Zie hieronder waarom:
Scob-Virus SANS document
One reader (thanks, Ben!) submitted a list of files found on his
compromised IIS server. The files he sent us included:
Code snippits.doc
iis6xx.dll (multiple copies, where xx varies)
iis7yy.dll (multiple copies, where yy varies)
Download_Ject_Symantec.doc
ipaddress.txt
issue.csv
ads.vbs
agent.exe
ftpcmd.txt
security_log.rtf
Finally, the executable we mentioned in the previous update (msits.exe)
is not detected by most AV suites, contrary to what we earlier thought.
Here is what we found when we tested it at virustotal.com:
BitDefender 7.0/20040624 nothing
eTrustAV-Inoc 4641/20040623 nothing
F-Prot 3.14e/20040624 nothing
Kaspersky 3.0/20040625 nothing
McAfee 4369/20040624 nothing
NOD32v2 1.794/20040623 nothing
Norman 5.70.01/20040512 nothing
Panda 7.02.00/20040624 nothing
Sybari 7.50.1138/20040624 [Win32.Webber]
Symantec 8.0/20040624 [Backdoor.Berbew.F]
TrendMicro 1.00/20040624 nothing
MVG
TTT