WormGuard vs. BAT/KillAV.N

Discussion in 'WormGuard' started by spy1, Jun 17, 2003.

Thread Status:
Not open for further replies.
  1. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    Now that you've received a copy of this, have you tested to see whether or not WormGuard would have stopped it? Pete
     
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Pete,

    Since this is your signature:

    I'll take it this is a rethorical question? ;)

    regards.

    paul
     
  3. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    Believe it or not - I somehow got "over-looked" when copies were being mailed.

    Go figure! :D Pete
     
  4. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    No way - can't believe that's actually true :D

    regards.

    paul
     
  5. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Most definitely, this thing is full of hostile commands.. as usual for script based worms :D
     
  6. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    I didn't notice a "Yes, it did" or a "No, it didn't" there, Gavin. :D Pete
     
  7. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
  8. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    Okay, just so I'm totally clear on this (assuming that's possible about me and anything! <g>) -

    Simply having WormGuard running on your computer would have prevented infection by KillAV.N even though it was brand-new, unknown and not in anyone's DB?

    It would have warned on the file no matter how it came?

    Got some screenshots? Pete
     
  9. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Haven't got screenshots sorry :p

    Yes, nothing can happen with this trojan, when Wormguard is installed and protecting. Thats a sure thing unless the user unwisely allows it :) Sorry I cant go into it too far, im still carefully analysing the complex trojan/XDCC hack kit mentioned in the TDS thread.

    And will be at it for a while yet ! Nasty things these are becoming :mad:
     
Thread Status:
Not open for further replies.