[Dshield] new virus

Pete Cap peteoutside at yahoo.com
Fri Dec 9 22:26:11 GMT 2005


I just resolved it:
 
 www.symantec.com is an alias for www.symantec.d4p.net.
 www.symantec.d4p.net is an alias for symantec.georedirector.akadns.net.
 symantec.georedirector.akadns.net is an alias for a568.d.akamai.net.
 a568.d.akamai.net has address 213.200.97.169
 a568.d.akamai.net has address 213.200.97.174
 a568.d.akamai.net has address 213.200.97.198
 a568.d.akamai.net has address 213.200.97.144
 a568.d.akamai.net has address 213.200.97.150
 
 Regards,
 
 Pete

Martin Forest <martin at forest.gen.nz> wrote: Is anyone able to resolve www.symantec.com?
I have used both my windows and linux computers, connected to local, isp  
and root servers in apac but noone seems to be able to resolve symantec...
Symantecs av seems to be able to connect to  
liveupdate.symantecliveupdate.com that do resolve.
/Martin Forest


On Sat, 10 Dec 2005 07:18:10 +1300, Isaac Perez  
 wrote:

> I do it now and no AV found anything.
> I'm not sure waht it does, but if it's not a virus I change my job.
> Because it's very suspicious.
> El vie, 09-12-2005 a las 16:00 +0000, stu escribió:
>> Out of interest have you ran this through virus total?
>>
>> http://www.virustotal.com/flash/index_en.html
>>
>> -----Original Message----
>> I just received an email from "microsoft" that claims to be an important
>>
>> update to stop spyware.
>> And you should install it, of course.
>> I attach the file zipped and with the password danger.
>> My nod32 don't detect it.
>>
>>
>> _________________________________________
>> Using .Net? Need to know more about .Net Security?
>> http://isc.sans.org/banner_count.php?dest=dotnet
>>
>> _______________________________________________
>> send all posts to list at lists.dshield.org
>> To change your subscription options (or unsubscribe), see:  
>> http://www.dshield.org/mailman/listinfo/list
>
> _________________________________________
> Using .Net? Need to know more about .Net Security?
> http://isc.sans.org/banner_count.php?dest=dotnet
>
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:  
> http://www.dshield.org/mailman/listinfo/list



-- 
If you take copy protection too far, the only customers you will have are  
the ones that intend to sell illegal copies of your work. By: Martin Forest
Warning: DRM/BMG protected CD’s are likely to infect you with a Rootkit.

_________________________________________
Using .Net? Need to know more about .Net Security?
http://isc.sans.org/banner_count.php?dest=dotnet

_______________________________________________
send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list



			
---------------------------------
Yahoo! Shopping
 Find Great Deals on Holiday Gifts at Yahoo! Shopping 
			
---------------------------------
Yahoo! Shopping
 Find Great Deals on Holiday Gifts at Yahoo! Shopping 


More information about the list mailing list