[Dshield] Help Needed With Dissection of Exploit

Tom Liston tliston at premmag.com
Wed Aug 10 18:40:23 GMT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Paul Marsh wrote:
> Tom:
> 
> 	Thanks for the reminder about a details in "Follow the Bouncing
> Malware".  I tried your idea on a little nasty I've got but I'm running
> into problems. It's having issues creating the ActiveXObject.  IE
> reports "Automation server can't create object"  I'm not a coder so I'm
> sure I'm screwing something up.  I'd like to find out what this thing is
> trying to do, any pointers would be much appreciated.
> 
> Thanx, Paul 

Paul-

If you can send me a link to the code you're trying to de-obfuscate,
I'll try to see if I can figure out what's going on.

- -TL
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)

iD8DBQFC+koWo6r9fhzAJkoRAwtdAJ924iYdAnxmyZdrLGCNl1+Y6Lj3hgCfUeRp
vnTsKQ4ts4yYZ+NN5O+zxQQ=
=97CZ
-----END PGP SIGNATURE-----


More information about the list mailing list