Well its the good old trick string.good known extension[ insert
numerous spaces here ].nasty executable extension
This relies on MS IExplore or Outlook to not show more than X characters
of the file name, but as your screen shots show, its detected as a
Screen saver meanijng it has a .scr
This virus is very detectable, It is important to verify a file with a
variety of vendors before labelling it new (never - undetectable).
Your web page only proved that Hotmail's AV scanners didn't pick it up,
nothing more.
Pasted results from www.virustotal.com
Results of a file scan
Andrew Smith to Farrukh Hussain:
Today I got e-mail from 69.197.83.68 CANADA ISP which has undetectable
virus.
This just means that you or your A/V hasn't updated their virus
definitions. Try multiple A/V programs, this will cover a wider range
of 'viruses'.
_OR_ it means Farrukh was
sers, i have download this virus and check it with my AVG. he
found it. better u use this software -- www.grisoft.com
here a log from AVG:
C:\Documents and Settings\USERNAME\DESKTOP\DETAILS.ZIP:\details\details..scr
Virus identified I-Worm/Mabutu
regards
Isshogei
sers, i have download this virus and check it with my AVG. he
found it. better u use this software -- www.grisoft.com
regards
This virus is very detectable, It is important to verify a file with a
variety of vendors before labelling it new (never - undetectable).
Your web page only proved that Hotmail's AV scanners didn't pick it up,
nothing more.
Pasted results from www.virustotal.com
Results of a file scan
Can we let this thread die? I mean seriously, we all get the point
that people's virus scanners can detect it and the importance of
updating virus definitions and that ISP's aren't really going to do
anything about it nor should they. Everyone chiming in with the same
two cents is getting real
Hi,Today I got e-mail from "69.197.83.68" CANADA ISP which has undetectable virus. Well I downloaded this file but I didn't run it because I know it is virus. and now I am complaining to "rogers.com" ISP about this matter. Because I got this file from this ISP. It is abuse of internet service. I
Title: Nachricht
nice
artwork.
-Ursprüngliche Nachricht-Von:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Im Auftrag von Farrukh
HussainGesendet: Freitag, 22. Oktober 2004 22:29An:
[EMAIL PROTECTED]Betreff: [Full-Disclosure]
Undetectable Virus from CANADA ISP
Today I got e-mail from 69.197.83.68 CANADA ISP which has undetectable
virus.
This just means that you or your A/V hasn't updated their virus
definitions. Try multiple A/V programs, this will cover a wider range
of 'viruses'.
Well I downloaded this file but I didn't run it because I know
Andrew Smith wrote:
Today I got e-mail from 69.197.83.68 CANADA ISP which has undetectable
virus.
Threat: [EMAIL PROTECTED]
___
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
--On Farrukh Hussain [EMAIL PROTECTED] wrote:
Hi,
Today I got e-mail from 69.197.83.68 CANADA ISP which has
undetectable virus. Well I downloaded this file but I didn't run it
because I know it is virus.
It's undetectable, and yet you detected it.
Imagine that.
It's the W32/[EMAIL PROTECTED]
On Fri Oct 22 22:28:50 2004, Farrukh Hussain [EMAIL PROTECTED] wrote:
Hi,
Today I got e-mail from 69.197.83.68 CANADA ISP
You mean a Canadian ISP?
which has undetectable virus.
By all anti-virus vendors?
Well I downloaded this file but I didn't run it because I know it is virus.
If
ph0enix wrote:
nice artwork.
-Ursprüngliche Nachricht-
*Von:* [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] *Im Auftrag von
*Farrukh Hussain
*Gesendet:* Freitag, 22. Oktober 2004 22:29
*An:* [EMAIL PROTECTED]
*Betreff:* [Full-Disclosure] Undetectable Virus from
14 matches
Mail list logo
