full-disclosure - VX: Old worm in new shoes (AntiQFX)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200406251156.29393.dhill+fulldisc@cricalix.net>
From: dhill+fulldisc at cricalix.net (Duncan Hill)
Subject: VX: Old worm in new shoes (AntiQFX)

On Friday 25 June 2004 08:36, X iniT might have typed:

> AntiQFX Worm masquerades as
> an old dos utilitly "MSCDEX.EXE". Basically
> spreads via shared networks and delets a few
> files which belong to a couple of Photo Editting

F-Secure Anti-Virus for Linux version 4.52  build 2461
Copyright (c) 1999-2003 F-Secure Corporation. All Rights Reserved.

Database version: 2004-06-25_01

Scan started at Fri Jun 25 11:55:26 2004

MSCDEX.EXE: Infected: Win32.HLLW.AntiQFX.a [AVP]
MSCDEX.EXE: Infected: Win32.HLLW.AntiQFX.a [AVP]