[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Antivirus/Trojan/Spyware scanners DoS!



On Sun, Jun 13, 2004 at 03:30:17AM -0700, bipin gautam wrote:
> I wounder how many Antivirus/Trojan/Spyware scanners
> will choak to death while having a manual scan of the
> file:
>
> http://www.geocities.com/visitbipin/SERVER_dwn.zip
>
> I was woundering, what would be the results if such
> file gets stucked in an "AV gateway" (O;
>
> please, report your findings.....

ClamAV quarantines it, although it did take a few seconds to return:

$ clamscan -V
clamscan / ClamAV version 0.72
$ clamscan SERVER_dwn.zip
SERVER_dwn.zip: Oversized.Zip FOUND

----------- SCAN SUMMARY -----------
Known viruses: 21920
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 20.13 MB
I/O buffer size: 131072 bytes
Time: 3.004 sec (0 m 3 s)

-Eric

--
arctic bears - affordable email and name services @yourdomain.com
http://www.arcticbears.com



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html