Full Disclosure mailing list archives
Re: VX: Old worm in new shoes (AntiQFX)
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Sat, 26 Jun 2004 03:58:28 +1200
X iniT <x1n1t () yahoo com> wrote: <<snip>>
Look closely and you'll see that i've attached this file using my yahoo account. Which happens to be protected by NAV !!! The following link clearly states that NAV detects this worm since 2002 !!! http://securityresponse.symantec.com/avcenter/venc/data/w32.antiqfx.f.worm .html Same thing is with AVP, ClamV & F-Prot. Only Sophos detects this file as AntiQFX.F variant.
That's odd -- I had the file scanned with 22 different virus scanners and only three (NAV, Panda and ClamAV) missed detecting it as "AntiQFX" or something very similar... Regards, Nick FitzGerald _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- VX: Old worm in new shoes (AntiQFX) X iniT (Jun 25)
- Re: VX: Old worm in new shoes (AntiQFX) Paolo A. Gallenga (Jun 25)
- Re: VX: Old worm in new shoes (AntiQFX) Duncan Hill (Jun 25)
- Re: VX: Old worm in new shoes (AntiQFX) Nick FitzGerald (Jun 25)
- Re: VX: Old worm in new shoes (AntiQFX) Raymond Dijkxhoorn (Jun 25)
- Re: VX: Old worm in new shoes (AntiQFX) Eric Paynter (Jun 25)
- <Possible follow-ups>
- RE: VX: Old worm in new shoes (AntiQFX) Randal, Phil (Jun 25)
- RE: VX: Old worm in new shoes (AntiQFX) X iniT (Jun 26)