Malformed Archives Scan Evasion Vulnerability

Discussion in 'NOD32 version 2 Forum' started by piktor, Oct 10, 2005.

Thread Status:
Not open for further replies.
  1. piktor

    piktor Registered Member

    Joined:
    Feb 4, 2005
    Posts:
    45
    Location:
    Germany
  2. fosius

    fosius Registered Member

    Joined:
    Oct 14, 2004
    Posts:
    479
    Location:
    Partizanske, Slovakia
    I wouldn't worry about this "vulnerability". You are totally safe if your realtime protection is turned on because when you run something from archive, program has to extract it first, and it is a point where AMON catchs it..:)
     
  3. Happy Bytes

    Happy Bytes Guest

    When cows can fly and/or you see lilac flying pigs this "Vulnerability" has to be considered. Maybe also when double cheeseburger can have childs. MAYBE...
     
  4. fosius

    fosius Registered Member

    Joined:
    Oct 14, 2004
    Posts:
    479
    Location:
    Partizanske, Slovakia
    VERYYY nice explanation...:D :D ;)
     
  5. Happy Bytes

    Happy Bytes Guest

    And this was only the short sumary :D
     
  6. piktor

    piktor Registered Member

    Joined:
    Feb 4, 2005
    Posts:
    45
    Location:
    Germany
    :D
    then it isn't really far away
    in some chats I use a poem of Novalis as my about:
    who hears butterflies laugh, knows the taste of clouds
    ;)

    I know that this "vulnerability" is uncritical, because of the realtime protection.
    Anyway ... in 15 years of computer I've lernead that nothing is impossible
    :rolleyes:

    -piktor-
     
  7. Happy Bytes

    Happy Bytes Guest

    Basicly, you can learn this from the very first day on - doesn't need 15 years in the year 2005. Just install Windows Standardconfiguration and plug the machine to the net. Wait some time and enjoy your first infection :rolleyes:
     
  8. piktor

    piktor Registered Member

    Joined:
    Feb 4, 2005
    Posts:
    45
    Location:
    Germany
    :D
    and basicly remains the question, why does NOD scans in archives at all, when it does'nt matters if there is a "Vulnerability" in archive modul?
    :D
    according to Your signature
    When you get to the point where you really understand how your antivirus works, it's probably obsolete...

    stay cool :cool: just a seriously joke ;)

    -piktor-
     
  9. DonKid

    DonKid Registered Member

    Joined:
    Jun 27, 2004
    Posts:
    566
    Location:
    S?o Paulo, Brazil
    That's what I can say about lots of beers.....
     
  10. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
    Wow,they tested it with Jotti and VirusTotal. Really reliable way to do the testing:rolleyes:
     
  11. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
    Pigs are flying!! :)
     

    Attached Files:

  12. alglove

    alglove Registered Member

    Joined:
    Jan 17, 2005
    Posts:
    904
    Location:
    Houston, Texas, USA

    Attached Files:

  13. rumpstah

    rumpstah Registered Member

    Joined:
    Mar 19, 2003
    Posts:
    486
    Hi piktor:

    Define an archive and then you will have your answer to "why does NOD scans in archives at all". ;)

     
Thread Status:
Not open for further replies.