Full Disclosure mailing list archives
Re: Re: Bagle worm status + more blocking information
From: Gadi Evron <ge () egotistical reprehensible net>
Date: Tue, 20 Jan 2004 22:16:13 -0800
Sylvain Robitaille wrote:
On Mon, 19 Jan 2004, Gadi Evron wrote:Finally now all AV products "speak" of this worm. Response times for detecting/cleaning/webpages updates were not so good.For what it's worth, Sophos on my mail servers was detecting these as of Jan 18 22:04:53 EST (GMT -0500). I think that's pretty good.
That's pretty good in comparison to some other AV products, but it's about 6-12 hours too late as far as I see.
Gadi Evron. The Trojan Horses Research Mailing List - http://ecompute.org/th-list _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Bagle worm status + more blocking information Gadi Evron (Jan 19)
- Re: Bagle worm status + more blocking information Anders (Jan 19)
- Re: Bagle worm status + more blocking information Paul Tinsley (Jan 20)
- Re: Bagle worm status + more blocking information Sylvain Robitaille (Jan 20)
- Re: Re: Bagle worm status + more blocking information Gadi Evron (Jan 20)
- News from Bagle worm Papp Geza (Jan 26)
- Re: News from Bagle worm Joe Stewart (Jan 26)
- Re: Re: Bagle worm status + more blocking information Gadi Evron (Jan 20)
- Security conferences n30 (Jan 22)
- Re: Security conferences Ben Nelson (Jan 22)
- RE: Security conferences Darkslaker (Jan 22)
- <Possible follow-ups>
- RE: Bagle worm status + more blocking information Donahue, Pat (Jan 19)
- RE: Bagle worm status + more blocking information David Maynor (Jan 19)