[Full-Disclosure] Re: Potentially new Virus

From: Feher Tamas (etomcat_at_freemail.hu)
Date: 11/25/03

  • Next message: Enno Rey: "Re: [Full-Disclosure] MPLS Security" 
    To: full-disclosure@lists.netsys.com
Date: Tue, 25 Nov 2003 12:16:18 +0100 (CET)

    Hello,

    >question: why is it so damn hard for us to search for info
    >on viruses by subject, msg body, or/and symptoms???

    Many viruses use a wide range of subjects and have a set of message
    body primitives prepared, so they can cheat message filtering.

    In order to check the virus sample, you could use web forms or
    automated e-mail addresses:

    Kaspersky Labs e-mail robot for samples (fastest to react):
    newvirus@kaspersky.com

    Trend Micro Web form:
    http://subwiz.trendmicro.com/SubWiz/Wizard.asp?opgWizard=7

    McAfee (NAI) e-mail at
    virus_research@nai.com

    CA (InoculateIT) web sample submit form:
    https://www.my-etrust.com/services/virusSampleForm.cfm

    If you submit a file and it is an already known malware, the form / auto-
    reply will tell you about it immediately. If the sample is new, the AV
    guys will process it and send you a reply ASAP. (Average 1,5-4 hours,
    maybe a little more at weekends).

    This way you don't spam the mailing list and get a rapid response 7x24.

    Sincerely: Tamas Feher from Hungary.

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Enno Rey: "Re: [Full-Disclosure] MPLS Security"

    Relevant Pages