Umm..and you were the one giving cheers to Norton. Of course AV can be
fooled..and of course a patch from microsoft is the only true way to fix
the problem.
She was attacking you for giving Cheers to Norton. I didn't release the
POC, you did. I am happy Norton is detecting it. If you want to change
your words right in the middle of the sentence, I really don't care.
By attacking me on a personal level, you have proven to me..to be
unprofessional at best.
________________________________
From: Michael Evanchik [mailto:Mike@MichaelEvanchik.com]
Sent: Wednesday, December 29, 2004 5:03 PM
To: Todd Towles; Elle Chicka; full-disclosure@lists.netsys.com
Subject: Re: [Full-Disclosure] And you're proud of this Mike
Evanchick?
Todd,
Listen, you are so wrong i cant belive you even have the guts to
post this. How stupid can you be? Norton or any AVP can easily be
fooled. The active x object "ca"+n b"+ +e crea" +ted" like this. code
changed around , or even different local code can be used and tada AVP
is fooled. Only a true patch from microsoft or disable the help control
in the registry is going to stop this. Her concern is wise.
Mike
www.michaelevanchik.com
----- Original Message -----
From: Todd Towles <mailto:toddtowles@brookshires.com>
To: Elle Chicka <mailto:c1b3r_chick@yahoo.com> ;
full-disclosure@lists.netsys.com
Sent: Wednesday, December 29, 2004 9:36 AM
Subject: RE: [Full-Disclosure] And you're proud of this
Mike Evanchick?
Well, if you have Norton, it couldn't wreak havoc...now
could it? Most of the AV compaines are now detecting the exploit. This
detection response is much faster than most of the other exploits which
are wreaking havoc on your network, so it would sound.
Nice work to Norton.
________________________________
From: full-disclosure-bounces@lists.netsys.com
[mailto:full-disclosure-bounces@lists.netsys.com] On Behalf Of Elle
Chicka
Sent: Monday, December 27, 2004 11:16 PM
To: full-disclosure@lists.netsys.com
Subject: [Full-Disclosure] And you're proud of
this Mike Evanchick?
You so proudly posted this:
------------------------
http://securityresponse.symantec.com/avcenter/venc/data/trojan.phel.a.ht
ml
<https://mail.microsoft.com/exchweb/bin/redir.asp?URL=http://securityres
ponse.symantec.com/avcenter/venc/data/trojan.phel.a.html>
mike
www.michaelevanchik.com
------------------------
Obviously you are just tickled to see that the
kiddies were able to so quickly turn your point/click sploit code into a
virus to wreak havoc on my network.
Thanks a lot for helping to make all of us a
little less secure over the holiday's.
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam
protection around
http://mail.yahoo.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
