Morph of Greeting Card trojan

Discussion in 'Computer Support' started by Tester, Oct 21, 2007.

  1. Tester

    Tester Guest

    This might have happened a while back because the first two copies of
    this version of the infected mail associated with the Storm worm which
    I received had non-working servers.

    But the version I got yesterday the executable file didn't set off
    Norton with the October 20 defs but it did with the October 21 defs. A
    very few of the online tests at VirusTotal got it, Kapinsky got it on
    Saturday and Jotti.org, which is similar to virustotal, seems to be
    down - prepetually too busy to accept an upload.

    Norton now calls this Trojan.peacomm. Some others have other names.
    They don't seem to be the same as the earlier storm worm and I think
    this is more a program which calls home to download and install new
    modules than anything specific in itself.
     
    Tester, Oct 21, 2007
    #1
    1. Advertising

  2. Tester

    Guest

    Tester <> wrote:

    >This might have happened a while back because the first two copies of
    >this version of the infected mail associated with the Storm worm which
    >I received had non-working servers.
    >
    >But the version I got yesterday the executable file didn't set off
    >Norton with the October 20 defs but it did with the October 21 defs. A
    >very few of the online tests at VirusTotal got it, Kapinsky got it on
    >Saturday and Jotti.org, which is similar to virustotal, seems to be
    >down - prepetually too busy to accept an upload.
    >
    >Norton now calls this Trojan.peacomm. Some others have other names.
    >They don't seem to be the same as the earlier storm worm and I think
    >this is more a program which calls home to download and install new
    >modules than anything specific in itself.


    There is a Zero day exploit, that use IE, Real Player and ActiveX
    http://blogs.zdnet.com/security/?p=599

    It calls out and downloads this executable
    hxxp://66.199.254.193/ads/r.php
    If you want to look at the file.
    --

    Fishin
    http://photo.net/photodb/photo?photo_id=6548455
     
    , Oct 21, 2007
    #2
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Sharon

    Nova Greeting Card Factory Deluxe

    Sharon, Dec 31, 2003, in forum: Computer Support
    Replies:
    4
    Views:
    1,861
    Sharon
    Jan 1, 2004
  2. Rhonda

    ISO glossy greeting card comparable to HP's

    Rhonda, Jan 4, 2004, in forum: Digital Photography
    Replies:
    3
    Views:
    400
    Michael Meissner
    Jan 4, 2004
  3. Vinod

    a special greeting card for you

    Vinod, Sep 14, 2005, in forum: Computer Security
    Replies:
    0
    Views:
    430
    Vinod
    Sep 14, 2005
  4. Tester

    Storm worm morph

    Tester, Nov 1, 2007, in forum: Computer Support
    Replies:
    2
    Views:
    494
    CHRISTOPHE CILLIS
    Nov 7, 2007
  5. Nomen Nescio

    Re: Storm worm morph

    Nomen Nescio, Nov 1, 2007, in forum: Computer Support
    Replies:
    2
    Views:
    438
Loading...

Share This Page