<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Cutwail and Rustock/Costrat: Same Command-and-Control Network</title>
	<atom:link href="http://www.bjou.de/blog/2008/09/cutwail-and-rustockcostrat-same-cc/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.bjou.de/blog/2008/09/cutwail-and-rustockcostrat-same-cc/</link>
	<description>Whose Blog? Bjou's Blog!</description>
	<lastBuildDate>Tue, 27 Jul 2010 01:56:38 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Florian</title>
		<link>http://www.bjou.de/blog/2008/09/cutwail-and-rustockcostrat-same-cc/comment-page-1/#comment-82251</link>
		<dc:creator>Florian</dc:creator>
		<pubDate>Fri, 03 Oct 2008 17:39:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.bjou.de/blog/?p=263#comment-82251</guid>
		<description>Hi Björn!

Try this webpage as well:

http://anubis.iseclab.org/

They do the same like Symantec and ThreatExpert but provide more details on the filesystem, registry or process activities. 

Note: The section &quot;General Information&quot; does not show the system behavior caused by your binary only. It is a general view on the system.

Downloading the file from the webserver mentioned above brings this result:
http://anubis.iseclab.org/result.php?taskid=f39a0f6ee6d65b34298a46b7b683414c&amp;refresh=1

Seems to be inoperable in this format. (encoded)
Perhaps you have an already decoded version to analyze. 

Best wishes ... 

Florian</description>
		<content:encoded><![CDATA[<p>Hi Björn!</p>
<p>Try this webpage as well:</p>
<p><a href="http://anubis.iseclab.org/" rel="nofollow">http://anubis.iseclab.org/</a></p>
<p>They do the same like Symantec and ThreatExpert but provide more details on the filesystem, registry or process activities. </p>
<p>Note: The section &#8220;General Information&#8221; does not show the system behavior caused by your binary only. It is a general view on the system.</p>
<p>Downloading the file from the webserver mentioned above brings this result:<br />
<a href="http://anubis.iseclab.org/result.php?taskid=f39a0f6ee6d65b34298a46b7b683414c&amp;refresh=1" rel="nofollow">http://anubis.iseclab.org/result.php?taskid=f39a0f6ee6d65b34298a46b7b683414c&amp;refresh=1</a></p>
<p>Seems to be inoperable in this format. (encoded)<br />
Perhaps you have an already decoded version to analyze. </p>
<p>Best wishes &#8230; </p>
<p>Florian</p>
]]></content:encoded>
	</item>
</channel>
</rss>
