<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
	xmlns:media="http://search.yahoo.com/mrss/"
	>
<channel>
	<title>Comments on: Storm Worm, GIFs, Passwords, Zips and Alerts</title>
	<atom:link href="http://asert.arbornetworks.com/2007/04/storm-worm-gifs-passwords-zips-and-alerts/feed/" rel="self" type="application/rss+xml" />
	<link>http://asert.arbornetworks.com/2007/04/storm-worm-gifs-passwords-zips-and-alerts/</link>
	<description>A weblog dedicated to educating the community on security threats that matter</description>
	<lastBuildDate>Wed, 17 Mar 2010 18:21:30 -0400</lastBuildDate>
	<generator>http://wordpress.org/?v=abc</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: You Got Postcard Malware &#183; Security to the Core &#124; Arbor Networks Security Blog</title>
		<link>http://asert.arbornetworks.com/2007/04/storm-worm-gifs-passwords-zips-and-alerts/comment-page-1/#comment-32500</link>
		<dc:creator>You Got Postcard Malware &#183; Security to the Core &#124; Arbor Networks Security Blog</dc:creator>
		<pubDate>Fri, 29 Jun 2007 16:32:29 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2007/04/storm-worm-gifs-passwords-zips-and-alerts/#comment-32500</guid>
		<description>[...] If you actually get hit, your box will ping the web server (/aff/cntr.php) start to download the Peacomm components, like /aff/dir/sony.exe , /aff/dir/logi.exe, and /aff/dir/pdp.exe. I&#8217;ve written a bit about The Storm Worm, Peacomm in ZIPs, and Peacomm in RAR files recently. [...]</description>
		<content:encoded><![CDATA[<p>[...] If you actually get hit, your box will ping the web server (/aff/cntr.php) start to download the Peacomm components, like /aff/dir/sony.exe , /aff/dir/logi.exe, and /aff/dir/pdp.exe. I&#8217;ve written a bit about The Storm Worm, Peacomm in ZIPs, and Peacomm in RAR files recently. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: &#187; &#8216;Storm Worm&#8217; surge exposes AV deficiencies &#124; Zero Day &#124; ZDNet.com</title>
		<link>http://asert.arbornetworks.com/2007/04/storm-worm-gifs-passwords-zips-and-alerts/comment-page-1/#comment-21251</link>
		<dc:creator>&#187; &#8216;Storm Worm&#8217; surge exposes AV deficiencies &#124; Zero Day &#124; ZDNet.com</dc:creator>
		<pubDate>Tue, 22 May 2007 22:39:50 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2007/04/storm-worm-gifs-passwords-zips-and-alerts/#comment-21251</guid>
		<description>[...] Arbor Networks researcher Jose Nazario flagged the poor anti-virus detections of the Storm Worm Trojan in a blog entry that noted the use of password-protected ZIP files to hide .EXE attachments. [...]</description>
		<content:encoded><![CDATA[<p>[...] Arbor Networks researcher Jose Nazario flagged the poor anti-virus detections of the Storm Worm Trojan in a blog entry that noted the use of password-protected ZIP files to hide .EXE attachments. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Peacomm RARs Its Ugly Head &#183; Security to the Core &#124; Arbor Networks Security Blog</title>
		<link>http://asert.arbornetworks.com/2007/04/storm-worm-gifs-passwords-zips-and-alerts/comment-page-1/#comment-15853</link>
		<dc:creator>Peacomm RARs Its Ugly Head &#183; Security to the Core &#124; Arbor Networks Security Blog</dc:creator>
		<pubDate>Wed, 25 Apr 2007 18:04:26 +0000</pubDate>
		<guid isPermaLink="false">http://asert.arbornetworks.com/2007/04/storm-worm-gifs-passwords-zips-and-alerts/#comment-15853</guid>
		<description>[...] Last evening we started seeing a stream of new malware that was a lot like the recent Storm ZIP run on about April 12. All of this malware is related to CME-711. This time we see a few changes: [...]</description>
		<content:encoded><![CDATA[<p>[...] Last evening we started seeing a stream of new malware that was a lot like the recent Storm ZIP run on about April 12. All of this malware is related to CME-711. This time we see a few changes: [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
