Search:

Hey everyone,

Ok.. here is what happened:

On different infected machines we found three different worms:

- SDBot.ZA
- IRCBOT.K
- SDBot.LL

Hi,

Yesterday we noticed some strange traffic from some internal machines
trying to contact Japan IP addresses on the port 54875 like 300 times a
second. We left the office without worrying too...

Well.. that was fast but I'm not talking about Suffixes and Prefixes .. I meant the NAME of the virus. Like Mydoom, Beagle or Netsky... what determines the choice of those names?

Thanks,

Roach4...

Hi everyone,

Could someone explain to me how the AV companies determine the name of a new virus they find?

Thanks,

Roach4 :rolleyes:

Is it just me or...

the last update is february 17 for both liveupdate and intelligent updater...

http://securityresponse.symantec.com/avcenter/download.html

Roach4

Hi there,


Any signature file for snort yet?

Any signature file for anti virus yet?

Any removal tool yet?

Here is what i'm talking about:

Symantec (Alua): http://securityresponse.symantec.com/avcenter/venc/data/w32.alua@mm.html

Trendmicro (Bagle.B):...

Symantec calls it "Alua" and some others call it "Bagle.B" ...

The source code I mean, the code of the php file, I want to know if it is dangerous to visit this link if I'm not infected.

And no...

Hi,

Anyone got hit by this new virus yet?

Any deep informations about it would be greatly appreciated! Do you know what is the source code of the .php files it tries to execute on the websites?...

Well that is weird because in most cases I can see the zip files with the infected file removed. Normally we can open the zip and see that nothing is inside and its size is 0k.

Any other idea...

Hi,

We got eSAFE installed and running fine, removing every attachment which contains a zip, exe, bat, and so on...

But here is what we see when eSAFE removes a ZIP attachment containing a...