AntiVirus Filename Bypassing

Discussion in 'NOD32 version 2 Forum' started by CogitoErgoSum, Oct 2, 2005.

Thread Status:
Not open for further replies.
  1. CogitoErgoSum

    CogitoErgoSum Registered Member

    Joined:
    Aug 22, 2005
    Posts:
    641
    Location:
    Cerritos, California
    In the link provided below, SecuriTeam has found that several antivirus programs do not scan file names that contain nonprintable ASCII characters and instead of blocking them they are simply ignored. Interestingly enough, NOD32 does not appear on either the vulnerable or immune systems list.

    http://www.securiteam.com/windowsntfocus/5TP0M2KGUQ.html


    Peace & Love,

    CogitoErgoSum
     
    CogitoErgoSum, Oct 2, 2005
    #1
  2. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    8,251
    Location:
    The land of no identity :D
    It means NOD32 does not fully suffer from this bug :D

    <just kidding> :D
     
    Firecat, Oct 2, 2005
    #2
  3. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    I tested NOD32 on Win XP Pro and isn't affected by this bug :)
    Good work Eset.
     
    sir_carew, Oct 2, 2005
    #3
  4. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,174
    Location:
    Denmark
    Same, AMON finds it everytime ;)
     
    Brian N, Oct 2, 2005
    #4
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...