Full Disclosure mailing list archives

Re: Backdoor not recognized by Kaspersky


From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Thu, 04 Mar 2004 13:08:34 +1300

Martin Ma ok <martin.macok () underground cz> wrote:

C) try each word from the message as a password

D) OCR all attached images and go to (C) with the result

(I saw the smiley...)

And there are trivial responses to this that would be introduced into 
the version after next of the virus (say, on Friday) if it became well-
known that this was what was happening at the updated scanner 
gateways...

As a colleague once said he (may still??):

   The good thing about the AV busines is we get to move second

   The bad thing is the virus writers get to move third...


-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: