[Dshield] Win32.Poza.A Mutant

Graham Dodd g.dodd at falk-ross.de
Tue Aug 19 09:14:30 GMT 2003


Mutated mblaster ??

I've just finished talking to our Spanish office and they have a WinXP
laptop infected with Win32.Poza.A

It's been cleaned "they thought" and patched, but it's still got the worm
(no, not the Tequila worm)

What they have just found is a copy of DrWatson in the
MyDocuments/AllUsers/Apps... which appears to be a copy of mblaster.exe

Anyone come across this, or is it the start of another variant

Graham

~~~~~~~~~~~~~~~~~~~~~
Graham K. Dodd
Director of Operation
Falk & Ross GmbH
Tel. +49(6301)717-0
Fax. +49(6301)717-270




More information about the list mailing list