Re: [Full-Disclosure] A worm...

From: ATD (simon_at_snosoft.com)
Date: 06/26/03

  • Next message: Nick FitzGerald: "RE: [Full-Disclosure] CD-ROM drive opens" 
    To: KF <dotslash@snosoft.com>
Date: 25 Jun 2003 21:10:38 -0400

    Yep,
            Thats what I was asking actually...

    On Wed, 2003-06-25 at 21:10, KF wrote:
    > I believe Simon is well aware of what virus this is... the question was
    > in relation to the zipping of the payload. I believe he was wondering if
    > this (zipping of payload) was some new Antivirus evasion trick or if
    > there was something more to it (like simply hoping a retarded user would
    > unzip and run the .pif).
    >
    > >>I know what it is, but since when did the pif worm start zipping itself?
    > >>did I miss something?
    > >>
    > -KF

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Nick FitzGerald: "RE: [Full-Disclosure] CD-ROM drive opens"

    Relevant Pages

    • Re: [Full-Disclosure] A worm...
      ... I believe Simon is well aware of what virus this is... ... in relation to the zipping of the payload. ...
      (Full-Disclosure)
    • Re: Trojans.... Is there a way???
      ... | usually not the province of virus detectors or virus removers. ... Virus -- software that self replicates and often has a payload that may be destructive. ... virus infects a goven computer it has a payload date. ... Trojan -- software that does NOT self replicate but usually has a payload that may be ...
      (microsoft.public.windowsxp.general)
    • Re: Trojans.... Is there a way???
      ... usually not the province of virus detectors or virus removers. ... Trojan = Usually does NOT cause local destruction (i.e., ... An example of a destructive virus payload would be the CIH (aka; ... malware class has become a growing problem nad now infects more ...
      (microsoft.public.windowsxp.general)
    • Re: Yet another way to obtain a virus. New virus disguised as PayPal e-mail
      ... I stand corrected in the terminology I selected: "New Virus", ... firm on the means by which the payload is carried, ... that carrier. ... > The only part that is new is how the Human Engineering aspect is triggered ...
      (microsoft.public.security.virus)
    • Re: the best virus ever made
      ... >> CIH had no such routine in its payload. ... I was saying that the closest any virus had come before ... >> deliberately destructive payload, since. ... I was talking about physical / permanent damage. ...
      (microsoft.public.security.virus)