Re: Using Magic Values along with filetype to find malicious files (was RE: Google Malware Search)

[Valdis.Kletnieks () vt edu]

On Mon, 17 Jul 2006 17:27:30 EDT, Dude VanWinkle said:

> Hmm, any bets on who is the most infected TLD...  :-)
>
> -JP<who is betting on .ru>

"Biggest source of malware" isn't the same as "most infected".

I'm betting on .com/.net (the US cablemodem/DSL section of that),
.ko, and .cn as being the biggest contenders for infected.

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/