[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] VX: Old worm in new shoes (AntiQFX)
- To: Full Disclosure <full-disclosure@xxxxxxxxxxxxxxxx>
- Subject: Re: [Full-Disclosure] VX: Old worm in new shoes (AntiQFX)
- From: Nick FitzGerald <nick@xxxxxxxxxxxxxxxxxxx>
- Date: Sat, 26 Jun 2004 03:58:28 +1200
X iniT <x1n1t@xxxxxxxxx> wrote:
<<snip>>
> Look closely and you'll see that i've attached this
> file using my yahoo account. Which happens to be
> protected by NAV !!!
>
> The following link clearly states that NAV detects
> this worm since 2002 !!!
> http://securityresponse.symantec.com/avcenter/venc/data/w32.antiqfx.f.worm
> .html
>
> Same thing is with AVP, ClamV & F-Prot.
>
> Only Sophos detects this file as AntiQFX.F variant.
That's odd -- I had the file scanned with 22 different virus scanners
and only three (NAV, Panda and ClamAV) missed detecting it as "AntiQFX"
or something very similar...
Regards,
Nick FitzGerald
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html