[Avcheck] Gibe & DrWeb [was: Test]

Sergey Akhapkin Sergey Akhapkin <asv@drweb.ru>
Fri, 15 Mar 2002 12:46:55 +0300


Hello Michael,

Friday, March 15, 2002, 2:41:50 AM, you wrote:

MT> ---(begin part of gibe virus)---
MT> ...
MT> If in doubt, please ask  for assistance. ATSI, Inc. scans all email with the lat
MT> est "NAI" software for KNOWN viruses.

MT> --NextPart_000235
MT> Content-Type: application/x-msdownload;
MT>         XaXe="q216309.exe"
MT> Content-Transfer-Encoding: base64
MT> Content-Disposition: attachment;
MT>         XiXeXaXe="q216309.exe"

MT>    TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
MT> AAAAuAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
MT> ...
MT> ---(end of gibe sample)--

MT> (note 3 spaces before TVqQ... in pre-last line).  If this is the case (I suspect
MT> it is), the answer is simple: DrWeb wan't detect this.  I don't know why.  I
MT> already sent this variant to support@drweb.ru at mar-12, but received nothing
MT> so far).

Michael, your report was accepted and problem fixed. Fixed engine
(drweb32.dll) would be available as soon as possible (we need time for
testing).

-- 
Best regards,
 Sergey                            mailto:asv@drweb.ru