[Question] Glob BO

Discussion in 'Virus Information' started by p00lb0y, Apr 26, 2006.

  1. p00lb0y

    p00lb0y Guest

    Hello all.

    I am looking for information regarding the Glob BO Trojan that
    occasionally gets picked up by Norton Internet Security on Windows XP
    Home Edition SP2. Data at the SARC site indicate it is a threat, but
    further state "It does not require immediate action". Would someone
    explain if this is a real threat or not?

    Here is the SARC link:

    http://securityresponse.symantec.com/avcenter/attack_sigs/s20430.html

    Thanks,

    PB
     
    p00lb0y, Apr 26, 2006
    #1
    1. Advertisements

  2. From: "p00lb0y" <>

    | Hello all.
    |
    | I am looking for information regarding the Glob BO Trojan that
    | occasionally gets picked up by Norton Internet Security on Windows XP
    | Home Edition SP2. Data at the SARC site indicate it is a threat, but
    | further state "It does not require immediate action". Would someone
    | explain if this is a real threat or not?
    |
    | Here is the SARC link:
    |
    | http://securityresponse.symantec.com/avcenter/attack_sigs/s20430.html
    |
    | Thanks,
    |
    | PB

    It is an exploitation attempt on the BSD FTP Daemon.

    There is no Glob BO Trojan. It is an exploitation of the FTP Daemon's glob() function.

    If you are on Broadband then get a Cable/DSL Router such as the Linksys BEFSR41. Then the
    Router, not a LAN node, will see this activity and you won't be bothered by such FireWall
    messages.
     
    David H. Lipman, Apr 26, 2006
    #2
    1. Advertisements

  3. p00lb0y

    Malke Guest

    If you Google "glob BO trojan" you will get lots of links with in-depth
    information about this trojan.

    You can submit the file to VirusTotal. They will send it to many
    antivirus companies and send you back a report about how each av
    company views it:
    ttp://www.virustotal.com/flash/index_en.html

    You can also run David Lipman's Multi_AV which is a first-line antivirus
    tool that uses 4 different av scanners.

    http://www.ik-cs.com/multi-av.htm - how to use Dave Lipman's Multi-AV
    http://www.ik-cs.com/programs/virtools/Multi_AV.exe - Multi-AV download
    http://pcdid.com/Multi_AV.htm - additional Multi_AV instructions

    Malke
     
    Malke, Apr 26, 2006
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.