Re: Trend Pattern File Version: 2.207

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/23/04 

Date: Fri, 22 Oct 2004 22:14:41 -0400

Nope Pattern File 2.212 fails to detect it !

Trend is too slow to post a sig. file when you submit an infector to them. McAfee on the
other hand is *very* quick and there Command Line Scanner (which is a dual mode DOS/Win32
utility) is better and is now up to 104,507 infectors. Unfortunately there is that license
issue that blocks me from posting how to obtain and use it publicly. Its an ethics thing.
I am willing to send information to individuals on a P2P basis. I have even created a
Kixtart script to make the job easier.

Send me an email, I'll send you my test file is a password protected ZIP file. I'll even
send you my McAfee info and script, etc.

Dave

"Br0wnbear" <brownbearat@canadadotcom.net> wrote in message
news:fqdjn0h1i13o9ck2eu4i3dek9v2mm0290b@4ax.com...
| On Fri, 22 Oct 2004 19:44:20 -0400, "David H. Lipman"
| <DLipman~nospam~@Verizon.Net> wrote:
|
| >I can't believe how long it is taking Trend to come up with a Pattern file that detects
this
| >virus.
| >
| >Pattern File 2.210 still doesn't !!!
| >
| >Dave
| >
| >
| >
| Does now Dave
| As of Oct 21, 2004, the latest pattern file number is 2.212.00.
|
| Although I didn't see it yesterday. *shrug*
| >
|
| hth
| John Brown
| "Bears have more fun, we hibern8 alot"

Relevant Pages

  • Re: Trend Pattern File Version: 2.204.00 -- 434 new viruses detected by the pattern file.
    ... Unless Trend created Pattern File 2.205, 2.206 only adds 8 new infectors. ... The following UseNet post ocontains the infector McAfee flags as "W32/Spybot.worm.gen.e" ... Trend fails to identify this infector, in 2.206, even though it was submitted to them :-( ...
    (microsoft.public.security.virus)
  • Re: svrhost.exe?
    ... If it is truly spelled "svrhost.exe" it may be an infector. ... Go to McAfee or Trend and perform an on-line scan of your PC ASAP. ... i know windows xp has a normal process named ...
    (microsoft.public.security.virus)
  • Re: NUDEBABES.SCR
    ... Any virus or other infector can be named any file, therefore the name of the file isn't too ... Please go to McAfee and/or Trend and perform an online scan ...
    (microsoft.public.security.virus)
  • Re: Realplayd.exe = new AGOBOT variant?
    ... Trend finally removes this infector, Trend calls it "WORM_AGOBOT.ABO" in Pattern File 2.251 ... Dave ...
    (microsoft.public.security.virus)
  • Re: Norton Antivirus 2003 Freezes
    ... Should i but McAfee? ... Why do you think Nortan freezes on me? ... Ant ... >This is a methodology to find an infector without having ...
    (microsoft.public.security.virus)