Re: VX: Old worm in new shoes (AntiQFX)

[Duncan Hill <dhill+fulldisc () cricalix net>]

On Friday 25 June 2004 08:36, X iniT might have typed:

> AntiQFX Worm masquerades as
> an old dos utilitly "MSCDEX.EXE". Basically
> spreads via shared networks and delets a few
> files which belong to a couple of Photo Editting

F-Secure Anti-Virus for Linux version 4.52  build 2461
Copyright (c) 1999-2003 F-Secure Corporation. All Rights Reserved.

Database version: 2004-06-25_01

Scan started at Fri Jun 25 11:55:26 2004

MSCDEX.EXE: Infected: Win32.HLLW.AntiQFX.a [AVP]
MSCDEX.EXE: Infected: Win32.HLLW.AntiQFX.a [AVP]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html