[Dshield] [Shield] Help decoding some evil web code

Tony Earnshaw tonni at hetnet.nl
Fri May 25 08:19:23 GMT 2007

Aaron Lewis skrev, on 05/24/2007 03:13 AM:
> Can we see the script?. Do you want to post it to the list?

ClamAV 0.90.2 thought this was Trojan.Perl.Shellbot and amavisd-new 
quarantined it :)


> -----Original Message-----
> From: list-bounces at lists.dshield.org
> [mailto:list-bounces at lists.dshield.org]On Behalf Of David Taylor
> Sent: Wednesday, May 23, 2007 5:14 PM
> To: General DShield Discussion List
> Subject: [Dshield] Help decoding some evil web code
> Hi all, I'm working with a reporter on a story that involves some Myspace
> security issues.  (don't laugh).  :)
> I need someone who is fairly spiffy in the evil webcode department,
> especially javascript to take a look at this and analyze it.  Props will be
> given in the story for your work. Please reply if you are interested in
> helping.

Tony Earnshaw
Email: tonni at hetnet dot nl

More information about the list mailing list