Full Disclosure mailing list archives

Re: Backdoor not recognized by Kaspersky


From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Thu, 04 Mar 2004 13:02:42 +1300

Cael Abal <lists2 () onryou com> wrote:

<<snip "easy tricks to bypass 'password in message body' scanning">>
...  I can easily see 
this becoming an arms-race, and one the anti-virus folks have no chance 
of winning.

What do you mean "becoming"??

Known virus scanning is, by definition, an arms race which the 
"antivirus" product has, almost by definition, "no chance of winning".

The really odd thing is that many folk (especially the large corporates 
whose admins should know _WAY_ better) bought into it and have kept 
paying...


-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: