RE: New Virus?
"James C Slora Jr" <[email protected]>
| Newsgroups | gmane.comp.security.incidents |
|---|---|
| Organization | PHR+A, pc |
| Message-ID | <[email protected]> |
As I understand it, Google tries to reduce the effectiveness of malware downloaders that use Google to find their payloads, to reduce the effectiveness of vulnerability scan tools that search for and attack vulnerable web apps, and to reduce warez pub searching. Search for "(anything)(10 or more of certain characters such as spaces)(anything)" and Google returns the same message. So searches for any of the following will return the same 403 page: "woohoo.file .blah" "rogers.doc .exe" "blah deblahblah" "blah+++++++++++++++++++++++++++kupa" "test++++++++++++++++++++++" " " "+++++++++++++++++++" Searching for filenames with lots of white space is even less useful than other malware filename searches. And Google's 403 page does not indicate anything useful about this particular malware find.