From: Nick FitzGerald (nickvirus-l.demon.co.uk)
Date: Thu Sep 02 2004 - 18:19:41 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

bashis wrote:

> Thx for the tip with VirusTotal guys! =)
>
> Here is the result.
<<snip>>

OK -- having delayed it this far, have you considered sending a copy to
the major AV vendors so they can add detection of it to their products
(and, in the case of those that already detect it heuristically or
generically, ensure that they don't "lose" detection of this possibly-
unseen-by-them variant when their heuristic/generic detectors get
revised/updated, as they are all the time)?

Here's a list of the sample submission address of the developers of the
better known virus scanners:

   Authentium (Command Antivirus) <virusauthentium.com>
   Computer Associates (US) <virusca.com>
   Computer Associates (Vet/EZ) <supportvet.com.au>
   DialogueScience (Dr. Web) <Antivirdials.ru>
   Eset (NOD32) <samplenod32.com>
   F-Secure Corp. <samplesf-secure.com>
   Frisk Software (F-PROT) <viruslabf-prot.com>
   Grisoft (AVG) <virusgrisoft.cz>
   H+BEDV (AntiVir, Vexira engine) <virusantivir.de>
   Kaspersky Labs <newviruskaspersky.com>
   Network Associates (McAfee) <virus_researchnai.com>
     (use a ZIP file with the password 'infected' without the quotes)
   Norman (NVC) <analysisnorman.no>
   Panda Software <labspandasoftware.com>
   Sophos Plc. <supportsophos.com>
   Symantec (Norton) <avsubmitsymantec.com>
   Trend Micro (PC-cillin) <virus_doctortrendmicro.com>
     (Trend may only accept files from users of its products)

--
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]