[Avcheck] Gibe & DrWeb [was: Test]
Sergey Akhapkin
Sergey Akhapkin <asv@drweb.ru>
Fri, 15 Mar 2002 12:46:55 +0300
Hello Michael,
Friday, March 15, 2002, 2:41:50 AM, you wrote:
MT> ---(begin part of gibe virus)---
MT> ...
MT> If in doubt, please ask for assistance. ATSI, Inc. scans all email with the lat
MT> est "NAI" software for KNOWN viruses.
MT> --NextPart_000235
MT> Content-Type: application/x-msdownload;
MT> XaXe="q216309.exe"
MT> Content-Transfer-Encoding: base64
MT> Content-Disposition: attachment;
MT> XiXeXaXe="q216309.exe"
MT> TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
MT> AAAAuAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
MT> ...
MT> ---(end of gibe sample)--
MT> (note 3 spaces before TVqQ... in pre-last line). If this is the case (I suspect
MT> it is), the answer is simple: DrWeb wan't detect this. I don't know why. I
MT> already sent this variant to support@drweb.ru at mar-12, but received nothing
MT> so far).
Michael, your report was accepted and problem fixed. Fixed engine
(drweb32.dll) would be available as soon as possible (we need time for
testing).
--
Best regards,
Sergey mailto:asv@drweb.ru