Virus scan attack

[Nate Nord <natenord () maximus com>]

Just wondering if anyone else has seen this come through their mail portal.
Something has caused our McAfee Webshield SMTP to seriously eat processor
time... to the point that it will no longer forward scanned mail.  I've had
to temporarily bypass it until I figure out what it's choking on.  I saw
several other posts that said this sent processors into some kind of loop
and this is exactly what appears to be happening with our portal.


] -----Original Message-----
] From: Bipin Gautam [mailto:visitbipin () hotmail com] 
] Sent: Sunday, June 13, 2004 7:33 AM
] To: bugtraq () securityfocus com
] Subject: Antivirus/Trojan/Spyware scanners DoS!
] 
] 
] 
] Hello everybody,
] 
] 
] 
] I doubt how many Antivirus/Trojan/Spyware scanners will choak 
] to death while having a "manual scan" of this file. Please go 
] ahead and give it a try.
] 
] 
] 
] http://www.geocities.com/visitbipin/SERVER_dwn.zip
] 
] 
] 
] I was woundering, what would be the results if such file gets 
] stucked in an "AV gateway" (O;
] 
] 
] 
] please, report your findings..... I have already been 
] bombarded with strange reports. 
] 
] 
] 
] regards,
] 
] 
] 
] Bipin Gautam
] 
] http://www.geocities.com/visitbipin/