Full Disclosure mailing list archives

Re: RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You"


From: "Thiago H. Pojda" <thiago.pojda () gmail com>
Date: Thu, 4 May 2006 11:20:41 -0300

AVG detects it as LoveLetter.

Database:           268.5.3/331
Database Date: 3/5/2006


On 5/4/06, Joxean Koret <> wrote:

Sorry, the email was sended without the attachment.

---
Regards,
Joxean Koret

> Attached goes a working "I Love You" virus in which
> I
> changed ONLY the variable "dirsystem" with the name
> "kk2" (The file attached have the extension
> ".txt.gz",
> otherwise, with the .vbs extension the file will be
> locked by all the most populars anti-viral
> toolkits).

Disclaimer:
~~~~~~~~~~~

The information in this advisory and any of its
demonstrations is provided "as is" without any
warranty of any kind.

I am not liable for any direct or indirect damages
caused as a result of using the information or
demonstrations provided in any part of this
advisory.


---------------------------------------------------------------------------

Contact:
~~~~~~~~

        Joxean Koret at joxeanpiti<<<<<<<<@>>>>>>>>yah00<<<<<<dot>>>>>es



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/





--
Thiago Henrique Pojda
Curitiba - PR
XX--xx--XX
"É fácil ter-se um sistema de computação seguro. Você meramente tem que
desconectar o seu sistema de qualquer rede externa, e permitir somente
terminais ligados diretamente a ele. Pôr a máquina e seus terminais em uma
sala fechada, e um guarda na porta."

F.T. Grampp e R.H. Morris

XX--xx--XX
XXIV Encontro Nacional dos Estudantes de Computação
31 de Julho a 04 de Agosto de 2006 - Poços de Caldas - MG
http://www.enec.org.br/enecomp2006
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: