[35420] in bugtraq
Re: Virus scan attack
daemon@ATHENA.MIT.EDU (Joao B. Diehl)
Tue Jun 22 02:46:01 2004
Message-ID: <40D44D15.1080306@dpi.inpe.br>
Date: Sat, 19 Jun 2004 11:26:29 -0300
From: "Joao B. Diehl" <diehl@dpi.inpe.br>
MIME-Version: 1.0
To: Nate Nord <natenord@maximus.com>
Cc: visitbipin@hotmail.com, bugtraq@securityfocus.com
In-Reply-To: <26F5636B481D6E4A851FB39A84B4B9DE7B3469@JAMESTOWN2>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
We had this same problem with the DAT 4367. Returning to
DAT 4366 it worked again.
Nate Nord wrote:
> Just wondering if anyone else has seen this come through their mail portal.
> Something has caused our McAfee Webshield SMTP to seriously eat processor
> time... to the point that it will no longer forward scanned mail. I've had
> to temporarily bypass it until I figure out what it's choking on. I saw
> several other posts that said this sent processors into some kind of loop
> and this is exactly what appears to be happening with our portal.
>
>
> ] -----Original Message-----
> ] From: Bipin Gautam [mailto:visitbipin@hotmail.com]
> ] Sent: Sunday, June 13, 2004 7:33 AM
> ] To: bugtraq@securityfocus.com
> ] Subject: Antivirus/Trojan/Spyware scanners DoS!
> ]
> ]
> ]
> ] Hello everybody,
> ]
> ]
> ]
> ] I doubt how many Antivirus/Trojan/Spyware scanners will choak
> ] to death while having a "manual scan" of this file. Please go
> ] ahead and give it a try.
> ]
> ]
> ]
> ] http://www.geocities.com/visitbipin/SERVER_dwn.zip
> ]
> ]
> ]
> ] I was woundering, what would be the results if such file gets
> ] stucked in an "AV gateway" (O;
> ]
> ]
> ]
> ] please, report your findings..... I have already been
> ] bombarded with strange reports.
> ]
> ]
> ]
> ] regards,
> ]
> ]
> ]
> ] Bipin Gautam
> ]
> ] http://www.geocities.com/visitbipin/
