<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Re: [Full-Disclosure] And you're proud of this Mike Evanchick?</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.3790.1289" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Let me put this lighter,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>WRONG</FONT></DIV>
<DIV><FONT face=Arial size=2> </FONT></DIV>
<DIV><FONT face=Arial size=2>I created this code first using KNOWN virus
strings. It would be trivial to use different code that is not
detected,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Mike</FONT></DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.michaelevanchik.com">www.michaelevanchik.com</A></FONT></DIV>
<DIV> </DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=michaelr@cisco.com href="mailto:michaelr@cisco.com">Michael
Reilly</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=toddtowles@brookshires.com
href="mailto:toddtowles@brookshires.com">Todd Towles</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Cc:</B> <A
title=full-disclosure@lists.netsys.com
href="mailto:full-disclosure@lists.netsys.com">full-disclosure@lists.netsys.com</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, December 29, 2004 3:50
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [Full-Disclosure] And you're
proud of this Mike Evanchick?</DIV>
<DIV><BR></DIV><!-- Converted from text/plain format -->
<P><TT><FONT size=2>Couldn't help seconding this. I do not understand
the purpose of he<BR>original message. I think Norton/Symantec did a
good job.<BR><BR>michael<BR>Todd Towles wrote:<BR>> Sounds like you need AV
and a bit of network security. If you are scared<BR>> of IRC trojans and
detectable viruses..then your time would be better<BR>> spent putting those
systems into place. Don't you think?<BR>><BR>><BR>>
________________________________<BR>><BR>>
From: <A
href="mailto:full-disclosure-bounces@lists.netsys.com">full-disclosure-bounces@lists.netsys.com</A><BR>>
[<A
href="mailto:full-disclosure-bounces@lists.netsys.com">mailto:full-disclosure-bounces@lists.netsys.com</A>]
On Behalf Of Elle<BR>> Chicka<BR>> Sent:
Monday, December 27, 2004 11:16 PM<BR>> To:
full-disclosure@lists.netsys.com<BR>>
Subject: [Full-Disclosure] And you're proud of this Mike<BR>>
Evanchick?<BR>> <BR>>
<BR>> You so
proudly posted this:<BR>>
------------------------<BR>> <BR>> <A
href="http://securityresponse.symantec.com/avcenter/venc/data/trojan.phel.a.ht">http://securityresponse.symantec.com/avcenter/venc/data/trojan.phel.a.ht</A><BR>>
ml<BR>>
<https://mail.microsoft.com/exchweb/bin/redir.asp?URL=http://securityres<BR>>
ponse.symantec.com/avcenter/venc/data/trojan.phel.a.html><BR>>
<BR>>
mike<BR>> <BR>>
www.michaelevanchik.com<BR>>
<BR>>
------------------------<BR>> Obviously you
are just tickled to see that the kiddies were able<BR>> to so quickly turn
your point/click sploit code into a virus to wreak<BR>> havoc on my
network.<BR>> <BR>>
Thanks a lot for helping to make all of us a
little less secure<BR>> over the holiday's.<BR>>
<BR>><BR>>
__________________________________________________<BR>>
Do You Yahoo!?<BR>>
Tired of spam? Yahoo! Mail has the best spam
protection around<BR>> <A
href="http://mail.yahoo.com">http://mail.yahoo.com</A><BR>><BR>><BR>><BR>><BR>>
------------------------------------------------------------------------<BR>><BR>>
_______________________________________________<BR>> Full-Disclosure - We
believe in it.<BR>> Charter: <A
href="http://lists.netsys.com/full-disclosure-charter.html">http://lists.netsys.com/full-disclosure-charter.html</A><BR><BR>--<BR>----
---- ----<BR>Michael Reilly
michaelr@cisco.com<BR> Cisco Systems,
California<BR>_______________________________________________<BR>Full-Disclosure
- We believe in it.<BR>Charter: <A
href="http://lists.netsys.com/full-disclosure-charter.html">http://lists.netsys.com/full-disclosure-charter.html</A></FONT></TT>
</P></BLOCKQUOTE></BODY></HTML>