Re: sp0rkeh 0wNs y0u virus

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 10/15/05 

Date: Fri, 14 Oct 2005 20:13:30 -0400

From: "Phil Weldon" <notdiscosed@example.com>

| 'David H. Lipman' sent a new trojan to AV vendors and posted these results
| on October 11, 12, 13, and 14.
| This is just a more compact and editable form of the attachments to his
| posts (and hopefully no typos.) This is, however, a second attempt at
| usable formatting.
|
| Thanks, David.
| __________
|
| Posted October 11, 2005
| Antivirus Version Updated Result
|
| Antivir 6.32.0.6 10.11 TR/Agent.JZ.1
| Avast 4.6.695.0 10.10 no virus found
| AVG 718 10.10 no virus found
| Avira 6.32.0.6 10.11 no virus found
| BitDefender 7.2 10.12 no virus found
| CAT-QuickHeal 8.00 10.11 no virus found
| ClamAV devel-20050917 10.11 no virus found
| DrWeb 4.32b 10.11 Trojan.Mygot
| ETrust-Iris 7.1.194.0 10.12 Win32/Myg0!Trojan
| ETrust-Vet 1.9.1.0 10.11 no virus found
| Fortinet 2.48.0.0 10.12 W32/Agent.JZ.tr
| F-Prot 3.16c 10.10 no virus found
| Ikarus 0.2.59.0 10.11 no virus found
| Kaspersky 4.0.2.24 10.12 Trojan.Win32.Agent.jz
| McAfee 4602 10.11 no virus found
| NOD32v2 1.1250 10.11 no virus found
| Norman 5.70.10 10.11 no virus found
| Panda 8.02.00 10.11 Trj/ForSpok.A
| Sophos 3.98.0 10.11 no virus found
| Symantec 8.0 10.12 Trojan Horse
| TheHacker 5.8.2.121 10.10 no virus found
| VBA32 3.10.4 10.11 Trojan.Win32.Agent.jz
|
| Changes Posted October 12, 2005
| Antivirus Version Updated Result
| Avira 6.32.0.6 10.12 TR/Agent.JZ.1
| Ikarus 0.2.59.0 10.12 Trojan.Win32.Agent.JZ
| Sophos 3.98.0 10.12 Troj/IRCBot-AI
| TheHacker 5.8.2.122 10.12 Trojan/Agent.jz
|
| Changes Posted October 13, 2005
| Antivirus Version Updated Result
| McAfee 4604 10.13 Del-486
|
| Changes Posted October 14, 2006
| Antivirus Version Updated Result
| BitDefender 7.2 10.14 Trojan.Agent.JZ
| CAT-QuickHeal 8.0 10.14 Trojan.Agent.jz
|
| __________
|
| Phil Weldon
|

Don't forget the addition of Ewido and Trend Micro (who don't have scanners on Virus Total,
thus not part of the posted JPEGs) on Oct 12.

Ewido -- Trojan.Agent.jz
Trend Micro -- TROJ_AGENT.ACH 

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Relevant Pages

  • Trend Micros Response to the Magic Byte Bug
    ... Anyone from Trend Micro listening? ... Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through ... engine 4.4.00, dat 4.0.4519 6/22/2005) ... NOT VULNERABLE vendors and software: ...
    (Bugtraq)
  • [Full-disclosure] Trend Micros Response to the Magic Byte Bug
    ... Anyone from Trend Micro listening? ... Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through ... engine 4.4.00, dat 4.0.4519 6/22/2005) ... NOT VULNERABLE vendors and software: ...
    (Full-Disclosure)
  • Re: Opinions on Trend Micro vs. McAfee products, please.
    ... I suppose that I'm looking to gather some feedback on the two vendors' ... differences between the Trend Micro and the McAfee product line that I ... My goal is to ultimately have a server module push ... For your scenario, IMHO, the best possible product is Trend Micro ...
    (alt.comp.anti-virus)
  • Re: Antivirus for Exchange 2003
    ... What about Symantec Antivirus for Exchange ??? ... Obviously there are a number of vendors out there. ... Trend Micro, and Sybari. ...
    (microsoft.public.exchange.admin)
Loading