Re: [Full-disclosure] McAfee VirusScan vs Metasploit Framework v2.x

["Morning Wood" <se_cur_ity@xxxxxxxxxxx>]

// look, no top post !!!

> Looks like some overzealous idiot at McAfee added "Trojan" signatures for
> 202 files in the latest version of the Metasploit Framework. If you use
> the Framework for your job and have a McAfee support contract, *please*
> call them and let them know that their product is incorrectly tagging a
> standard security tool as a "Trojan" and that this is interfering with
> your ability to conduct business.

the external payloads ( such as vncdll.dll ), could be considered a
"possible malware threat"
but not the whole package. ( although i guess if kiddies can root your
server, upload msf, launch msfweb, that would give you a remote attack
platform... right ). Further, to include these sigs on a desktop product is
just ignorant.

mw
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/