r2 - 11 Jul 2008 - 15:05:58 - MattJonkmanYou are here: TWiki >  Main Web > MalwareDocs > GrooveNet

Groove.Net

Groove.net is a vierual office suite. It's a perfectly legitimate app, looks quite nice. We do not have these rules here because the application is in any way mailcious or hostile. It allows remote storage and manipulation of internal data, which may be sensitive.

In many environments that is not an allowable practice. These signatures will alert admins when the product is in use. If it is allowed in your environment, then do not run these signatures.

The signatures included are 2003599-2003602

The application is SOAP based and does not appear to more than very basicly encrypt. All requests and posts are via http.

All related material here:

2003601 TWikiGuest 12 Feb 2009 - 00:15
2003600 TWikiGuest 12 Feb 2009 - 00:15
2003602 TWikiGuest 12 Feb 2009 - 00:15
2003599 TWikiGuest 12 Feb 2009 - 00:15
GrooveNet MattJonkman 11 Jul 2008 - 15:05

-- MattJonkman - 20 Apr 2007

Edit | Attach | Printable | Raw View | Backlinks: Web, All Webs | History: r2 < r1 | More topic actions
 
Emerging Threats
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback