OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] VX: Old worm in new shoes (AntiQFX)

From: Duncan Hill (dhill+fulldisccricalix.net)
Date: Fri Jun 25 2004 - 05:56:29 CDT


On Friday 25 June 2004 08:36, X iniT might have typed:

> AntiQFX Worm masquerades as
> an old dos utilitly "MSCDEX.EXE". Basically
> spreads via shared networks and delets a few
> files which belong to a couple of Photo Editting

F-Secure Anti-Virus for Linux version 4.52 build 2461
Copyright (c) 1999-2003 F-Secure Corporation. All Rights Reserved.

Database version: 2004-06-25_01

Scan started at Fri Jun 25 11:55:26 2004

MSCDEX.EXE: Infected: Win32.HLLW.AntiQFX.a [AVP]
MSCDEX.EXE: Infected: Win32.HLLW.AntiQFX.a [AVP]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html