Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Backdoor not recognized by Kaspersky
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Thu, 04 Mar 2004 13:02:42 +1300

Cael Abal <lists2 () onryou com> wrote:

<<snip "easy tricks to bypass 'password in message body' scanning">>
...  I can easily see 
this becoming an arms-race, and one the anti-virus folks have no chance 
of winning.

What do you mean "becoming"??

Known virus scanning is, by definition, an arms race which the 
"antivirus" product has, almost by definition, "no chance of winning".

The really odd thing is that many folk (especially the large corporates 
whose admins should know _WAY_ better) bought into it and have kept 

Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]