[Dshield] [Shield] Help decoding some evil web code

Tony Earnshaw tonni at hetnet.nl
Fri May 25 08:19:23 GMT 2007


Aaron Lewis skrev, on 05/24/2007 03:13 AM:
> Can we see the script?. Do you want to post it to the list?

ClamAV 0.90.2 thought this was Trojan.Perl.Shellbot and amavisd-new 
quarantined it :)

--Tonni

> -----Original Message-----
> From: list-bounces at lists.dshield.org
> [mailto:list-bounces at lists.dshield.org]On Behalf Of David Taylor
> Sent: Wednesday, May 23, 2007 5:14 PM
> To: General DShield Discussion List
> Subject: [Dshield] Help decoding some evil web code
> 
> 
> Hi all, I'm working with a reporter on a story that involves some Myspace
> security issues.  (don't laugh).  :)
> 
> I need someone who is fairly spiffy in the evil webcode department,
> especially javascript to take a look at this and analyze it.  Props will be
> given in the story for your work. Please reply if you are interested in
> helping.

-- 
Tony Earnshaw
Email: tonni at hetnet dot nl


More information about the list mailing list