Re: Using Magic Values along with filetype to find malicious files (was RE: Google Malware Search)

["Brendan Dolan-Gavitt" <mooyix () gmail com>]

Not that strange--they're archived attachments sent to mailing lists...

-Brendan

On 7/17/06, Dude VanWinkle <dudevanwinkle () gmail com> wrote:
> top 2 weird malware distribution sites:
>
> http://lists.w3.org/Archives/Public/site-comments/2003Aug/att-0008/movie0045.pif
>
> lists.suse.com/archive/suse-sparc/2004-Jan/att-0009/message.pif
>
> -JP
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/