Full Disclosure mailing list archives

Re: Antivirus/Trojan/Spyware scanners DoS!


From: "Eric Paynter" <eric () arcticbears com>
Date: Sun, 13 Jun 2004 16:21:48 -0700 (PDT)

On Sun, Jun 13, 2004 at 03:30:17AM -0700, bipin gautam wrote:
I wounder how many Antivirus/Trojan/Spyware scanners
will choak to death while having a manual scan of the
file:

http://www.geocities.com/visitbipin/SERVER_dwn.zip

I was woundering, what would be the results if such
file gets stucked in an "AV gateway" (O;

please, report your findings.....

ClamAV quarantines it, although it did take a few seconds to return:

$ clamscan -V
clamscan / ClamAV version 0.72
$ clamscan SERVER_dwn.zip
SERVER_dwn.zip: Oversized.Zip FOUND

----------- SCAN SUMMARY -----------
Known viruses: 21920
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 20.13 MB
I/O buffer size: 131072 bytes
Time: 3.004 sec (0 m 3 s)

-Eric

--
arctic bears - affordable email and name services @yourdomain.com
http://www.arcticbears.com



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: