Re: clamav and magic byte

2005-11-03 Thread Andrey Bayora
change the FIRST byte to anything and the virus is detected, but when you change to "M" (exe magic byte) - the AV fails.What is your conclusion? Regards, Andrey Bayora. - Original Message - From: "Florian Weimer" <[EMAIL PROTECTED]> To: "Andrey Bayora"

Re: Re: clamav and magic byte

2005-11-03 Thread Andrey Bayora
Hi Florian, > "...Andrey Bayora just describes one way to create new viruses, there are countless others." Please, read http://www.securityelf.org/magicbyteadv.html - there are 13 CVE numbers issued for this BUG. If it is not - why AV vendors issues patches for this "issue&