full-disclosure - Antivirus/Trojan/Spyware scanners DoS!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: sk3tch at sk3tch.net (sk3tch@...tch.net)
Subject: Antivirus/Trojan/Spyware scanners DoS!

Also, just tested the following:

Symantec AntiVirus Corporate Edition 9.0.0.338 on Windows XP SP1 + all
latest patches (on VMware GSX Server 3.0.0.0 build 7592)
Engine: 1.2.0.13
Defs: 06/13/04 rev 17

It found 5 infected items (bipin.zip with the Eicar test string) and
quarantined the file.  It took approximately 1 minute to scan it.  No
crash...system stable after complete scan.

--

Network Associates (McAfee) VirusScan Enterprise 7.1 on Windows XP SP2
v.2142 (on VMware Workstation 4.5.1 build 7568 for Linux)
Engine: 4.3.20
Defs: 06/09/04 (4365)

This one scanned for a looong time.  I walked away and came back.  Over
20+ minutes.  It scanned 1278 items and found 10 as being infected (as
Eicar test file).  No crash...system stable after scan complete.

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com on behalf of bipin gautam
Sent: Sun 6/13/2004 5:30 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Antivirus/Trojan/Spyware scanners DoS!

Hello everybody,

I wounder how many Antivirus/Trojan/Spyware scanners
will choak to death while having a manual scan of the
file:

http://www.geocities.com/visitbipin/SERVER_dwn.zip

I was woundering, what would be the results if such
file gets stucked in an "AV gateway" (O;

please, report your findings..... 

regards,
Bipin Gautam

http://www.geocities.com/visitbipin/