2007-01-01
Abstract
W32/Nubys-A looked, at first glance, like a trojan downloader. However, most samples contained not one, but several legitimate PE files in the appended data. Samples with one appended executable would have suggested a prepending virus, but why several? Robert Poston makes sense of the conundrum.
Copyright © 2007 Virus Bulletin
The full article is available to registered users. Click here for free registration or, if you already are a registered user, login to access the full article.
![]() |
Magazine | ![]() |
![]() |
Quick Links | ![]() |
![]() |
Poll | ![]() |
| ||||||
![]() |
VB100 certification | ![]() |
| ||||||
Virus Bulletin currently has 224,243 registered users.






This month's VB100 test saw some major changes and a radical overhaul of the VB100 test methodology - for the first time allowing products to use their 'cloud' look-up systems. John Hawes has all the details.