Bugtraq mailing list archives
mcafee dat corrupted? (was: Virus scan attack)
From: Diyan Christian <diyan () mitra net id>
Date: Tue, 22 Jun 2004 12:17:56 +0700
I'm using mcafee (linux) uvscan v4.1.60 with 4367 DAT, uvscan dumps core even on execution of `uvscan --version` (I'm using uvscan in smtp content-filtering). Suspected of corrupted file transfer, I try to download the DAT file again, but seems the DAT is corrupted from the source (ftp.nai.com/pub/antivirus/datfiles/4.x/). Revert back to 4366 and it runs ok. On Saturday 19 June 2004 21:26, Joao B. Diehl wrote:
We had this same problem with the DAT 4367. Returning to DAT 4366 it worked again. Nate Nord wrote:Just wondering if anyone else has seen this come through their mail portal. Something has caused our McAfee Webshield SMTP to seriously eat processor time... to the point that it will no longer forward scanned mail. I've had to temporarily bypass it until I figure out what it's choking on. I saw several other posts that said this sent processors into some kind of loop and this is exactly what appears to be happening with our portal. ] -----Original Message----- ] From: Bipin Gautam [mailto:visitbipin () hotmail com] ] Sent: Sunday, June 13, 2004 7:33 AM ] To: bugtraq () securityfocus com ] Subject: Antivirus/Trojan/Spyware scanners DoS! ] ] ] ] Hello everybody, ] ] ] ] I doubt how many Antivirus/Trojan/Spyware scanners will choak ] to death while having a "manual scan" of this file. Please go ] ahead and give it a try. ] ] ] ] http://www.geocities.com/visitbipin/SERVER_dwn.zip ] ] ] ] I was woundering, what would be the results if such file gets ] stucked in an "AV gateway" (O; ] ] ] ] please, report your findings..... I have already been ] bombarded with strange reports. ] ] ] ] regards, ] ] ] ] Bipin Gautam ] ] http://www.geocities.com/visitbipin/
Current thread:
- Virus scan attack Nate Nord (Jun 18)
- Re: Virus scan attack Joao B. Diehl (Jun 21)
- Re: Virus scan attack Vincent Archer (Jun 22)
- mcafee dat corrupted? (was: Virus scan attack) Diyan Christian (Jun 22)
- Re: Virus scan attack Victor Julien (Jun 22)
- <Possible follow-ups>
- Re: Virus Scan Attack Paul Knibbs (Jun 22)
- Re: Virus scan attack Joe Fubar (Jun 22)
- Re: Virus scan attack Joao B. Diehl (Jun 21)