[Full-disclosure] RE: Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You"

Joxean Koret joxeankoret at yahoo.es
Thu May 4 17:08:28 BST 2006


Hello!

It is not the end of the fun. I have been test the
viruses Tune and Melissa and, what a surprise, ClamAV
detects it, Panda Antivirus does not.

Attached goes another virus with "advanced encryption
methods", as the one I used (by changing the name of
one variable).

It's very-very-very fun...

---
 --- Joxean Koret <joxeankoret at yahoo.es> wrote:

> Sorry, the email was sended without the attachment.
> 
> ---
> Regards,
> Joxean Koret
> 
> > Attached goes a working "I Love You" virus in
> which
> > I
> > changed ONLY the variable "dirsystem" with the
> name 
> > "kk2" (The file attached have the extension
> > ".txt.gz",
> > otherwise, with the .vbs extension the file will
> be
> > locked by all the most populars anti-viral
> > toolkits).

Disclaimer:
~~~~~~~~~~~

The information in this advisory and any of its 
demonstrations is provided "as is" without any
warranty of any kind.

I am not liable for any direct or indirect damages
caused as a result of using the information or
demonstrations provided in any part of this
advisory. 

---------------------------------------------------------------------------

Contact:
~~~~~~~~

	Joxean Koret at
joxeanpiti<<<<<<<<@>>>>>>>>yah00<<<<<<dot>>>>>es


		
______________________________________________ 
LLama Gratis a cualquier PC del Mundo. 
Llamadas a fijos y móviles desde 1 céntimo por minuto. 
http://es.voice.yahoo.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test.melissa.txt.gz
Type: application/x-gzip
Size: 2056 bytes
Desc: 1850295607-test.melissa.txt.gz
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060504/5c6a954c/attachment.bin 


Full-Disclosure is hosted and sponsored by Secunia.