Full Disclosure mailing list archives

Re: Re: Bagle worm status + more blocking information


From: Gadi Evron <ge () egotistical reprehensible net>
Date: Tue, 20 Jan 2004 22:16:13 -0800

Sylvain Robitaille wrote:

On Mon, 19 Jan 2004, Gadi Evron wrote:


Finally now all AV products "speak" of this worm.
Response times for detecting/cleaning/webpages updates were not so good.


For what it's worth, Sophos on my mail servers was detecting these as
of Jan 18 22:04:53 EST (GMT -0500).  I think that's pretty good.


That's pretty good in comparison to some other AV products, but it's about 6-12 hours too late as far as I see.

        Gadi Evron.

The Trojan Horses Research Mailing List - http://ecompute.org/th-list

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: