[Dshield] ev1.net trojan (was yahoo.fr trojan)

Johannes B. Ullrich jullrich at sans.org
Sat Jan 17 17:00:24 GMT 2004


Looks like we got a simple, but interesting trojan on your hands. Things
are still somewhat in flux, but I will try to keep on updating the diary
accordingly:

http://isc.sans.org/diary.html?date=2004-01-16

Please send me any sample you may have.

-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040117/b3aa064d/attachment.bin


More information about the list mailing list