AntiVirus Filename Bypassing

Discussion in 'NOD32 version 2 Forum' started by CogitoErgoSum, Oct 2, 2005.

Thread Status:
Not open for further replies.
  1. CogitoErgoSum

    CogitoErgoSum Registered Member

    Joined:
    Aug 22, 2005
    Posts:
    641
    Location:
    Cerritos, California
    In the link provided below, SecuriTeam has found that several antivirus programs do not scan file names that contain nonprintable ASCII characters and instead of blocking them they are simply ignored. Interestingly enough, NOD32 does not appear on either the vulnerable or immune systems list.

    http://www.securiteam.com/windowsntfocus/5TP0M2KGUQ.html


    Peace & Love,

    CogitoErgoSum
     
  2. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    It means NOD32 does not fully suffer from this bug :D

    <just kidding> :D
     
  3. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    I tested NOD32 on Win XP Pro and isn't affected by this bug :)
    Good work Eset.
     
  4. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    Same, AMON finds it everytime ;)
     
Thread Status:
Not open for further replies.