[Full-Disclosure] And you're proud of this Mike Evanchick?

Todd Towles toddtowles at brookshires.com
Thu Dec 30 14:38:51 GMT 2004


Umm..and you were the one giving cheers to Norton. Of course AV can be
fooled..and of course a patch from microsoft is the only true way to fix
the problem. 
 
She was attacking you for giving Cheers to Norton. I didn't release the
POC, you did. I am happy Norton is detecting it. If you want to change
your words right in the middle of the sentence, I really don't care.
 
By attacking me on a personal level, you have proven to me..to be
unprofessional at best.


________________________________

	From: Michael Evanchik [mailto:Mike at MichaelEvanchik.com] 
	Sent: Wednesday, December 29, 2004 5:03 PM
	To: Todd Towles; Elle Chicka; full-disclosure at lists.netsys.com
	Subject: Re: [Full-Disclosure] And you're proud of this Mike
Evanchick?
	
	
	Todd,
	 
	Listen, you are so wrong i cant belive you even have the guts to
post this.  How stupid can you be?  Norton or any AVP can easily be
fooled.  The active x object "ca"+n b"+ +e crea" +ted" like this. code
changed around , or even different local code can be used and tada AVP
is fooled.  Only a true patch from microsoft or disable the help control
in the registry is going to stop this.  Her concern is wise.  
	 
	Mike
	www.michaelevanchik.com
	 

		----- Original Message ----- 
		From: Todd Towles <mailto:toddtowles at brookshires.com>  
		To: Elle Chicka <mailto:c1b3r_chick at yahoo.com>  ;
full-disclosure at lists.netsys.com 
		Sent: Wednesday, December 29, 2004 9:36 AM
		Subject: RE: [Full-Disclosure] And you're proud of this
Mike Evanchick?

		Well, if you have Norton, it couldn't wreak havoc...now
could it? Most of the AV compaines are now detecting the exploit. This
detection response is much faster than most of the other exploits which
are wreaking havoc on your network, so it would sound.
		 
		Nice work to Norton.


________________________________

			From: full-disclosure-bounces at lists.netsys.com
[mailto:full-disclosure-bounces at lists.netsys.com] On Behalf Of Elle
Chicka
			Sent: Monday, December 27, 2004 11:16 PM
			To: full-disclosure at lists.netsys.com
			Subject: [Full-Disclosure] And you're proud of
this Mike Evanchick?
			
			
			You so proudly posted this:
			------------------------
	
http://securityresponse.symantec.com/avcenter/venc/data/trojan.phel.a.ht
ml
<https://mail.microsoft.com/exchweb/bin/redir.asp?URL=http://securityres
ponse.symantec.com/avcenter/venc/data/trojan.phel.a.html> 
			
			mike
			
			www.michaelevanchik.com
			 
			------------------------
			Obviously you are just tickled to see that the
kiddies were able to so quickly turn your point/click sploit code into a
virus to wreak havoc on my network.
			
			Thanks a lot for helping to make all of us a
little less secure over the holiday's.
			 

	
__________________________________________________
			Do You Yahoo!?
			Tired of spam? Yahoo! Mail has the best spam
protection around 
			http://mail.yahoo.com 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20041230/04f6a2bc/attachment.html 


Full-Disclosure is hosted and sponsored by Secunia.