Re[2]: I HATE antivirus scanners

From: heyhey_ (heyhey_at_private)
Date: Sun Mar 24 2002 - 09:05:31 PST

  • Next message: Dom De Vitto: "RE: IDS and SSL"

    Hello Bourque,
    
    That was my thought, but ... according to my experience most of the
    antivirus checkers reject password protected .zip files, so I'll
    probably receive the same amount of e-mails (or even more because even
    scanners with out of date definitions will reject it too)
    
    Sunday, March 24, 2002, 6:55:34 PM, you wrote:
    
    BD> Next time, zip it and password protect it!!! and don't forget to put the
    BD> password in the message too...
    
    BD> -----Message d'origine-----
    BD> De: heyhey_ [mailto:heyhey_at_private]
    BD> Date: 24 mars, 2002 11:26
    BD> À: vuln-devat_private
    BD> Objet: I HATE antivirus scanners
    
    
    BD> Hello all,
    
    BD> I've received more than 200 auto-responses to my previous e-mail.
    BD> "pure IE code injection".
    
    BD> my message DID NOT CONTAIN virus. just a demo exploit code, that needs
    BD> a lot of testing on different systems.
    
    BD> next time, I'll have to use non-existing sender name or encode the
    BD> text as a PDF file.
    
    BD> P.S.
    BD> attached .zip file was classified by various antivirus scanners as
    BD> Exploit-CodeBase
    BD> Exploit-CodeBaseExec
    BD> JS/CBLogoff.Trojan
    BD> JS_CIDEXPLOIT.B
    



    This archive was generated by hypermail 2b30 : Sun Mar 24 2002 - 09:12:08 PST