Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Backdoor not recognized by Kaspersky
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Thu, 04 Mar 2004 13:08:34 +1300

Martin Ma ok <martin.macok () underground cz> wrote:

C) try each word from the message as a password

D) OCR all attached images and go to (C) with the result

(I saw the smiley...)

And there are trivial responses to this that would be introduced into 
the version after next of the virus (say, on Friday) if it became well-
known that this was what was happening at the updated scanner 

As a colleague once said he (may still??):

   The good thing about the AV busines is we get to move second

   The bad thing is the virus writers get to move third...

Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]