Full Disclosure mailing list archives

RE: A worm...


From: "M. Osten" <lists () bleepyou com>
Date: 26 Jun 2003 19:37:12 -0500

On Thu, 2003-06-26 at 10:14, ATD wrote:
Yes, 
      And this was my point. Are the crafty "worm gods" creating worms that
evade detection by using compression and other methods?  If they are
doing this, and if they are creating the "stealth worms" whats next. Zip
files would be just one of hundreds of ways to hide worms. Maybe the
virus scanning technology needs to be kicked up a notch or two.

Do most virus scanners *not* scan compressed files?  We scan all
incoming mail using Amavis (on linux) with the NAI engine which does
scanning of all the common compression schemes.
-- 
--------------------------
M. Osten
www.bleepyou.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: