Several leaks in antivrus scanners includes Nod32 and others

[martindijk]

Hi all,

Read about it in this Pdf file:

http://www.48bits.com/advisories/rtldospath.pdf

For our dutch readers: http://www.security.nl/article/13540/1/Lek_in_virusscanners_en_anti-spyware_geeft_malware_vrij_spel.html

cheers,
Martin

[pykko]

at least on-access scanner can detect for NOD32. Hope they'll fix this issue. :)

[Marcos]

It's a matter of Windows itself, hopefully MS will release a hotfix shortly.

[Lollan]

Pretty interesting still. :)

[FirePost]

{QUOTE-> Pretty interesting still. :) <-QUOTE}Yes it is. I was interested in that not all programs were vulnerable in the same way if at all.

[Alphalutra1]

This is pretty scary that all of these avs are vulnerable, seems to be a windows problem http://www.securityfocus.com/bid/17934/info :-\

Alphalutra1

[Bubba]

Since this exploit concerns numerous AV's I have taken the liberty to move this thread into our all AV forum and merge Alphalutra1's relevant thread for further discussion.

[Marcos]

Anyway, NOD32's AMON blocks such special crafted files and allows deletion upon access.

[ink]

kaspersky 6 realtime scan stop and clean this.

[Edwin024]

{QUOTE-> kaspersky 6 realtime scan stop and clean this. <-QUOTE}

Great that the new Kaspersky can do what the old one, and others, can't.

And the Dutch website says that it's not only a problem of Windows but also of the AV-makers, so please don't point only at Microsoft.