Re: wintbp.exe
"alex shipp" <[email protected]>
| Newsgroups | gmane.comp.security.virus |
|---|---|
| Message-ID | <[email protected]> |
> From: "Mike" <[email protected]> > ... > AV is reactive by design... Where have you been the last 5 years? Some AV is reactive in design, but not all. For instance, McAfee products such as McAfee VirusScan 8.0 can prevent the attack with the generic buffer overflow protection enabled. No doubt some other desktop products detected this proactively as well. The worm contains many components from and similarities to previous malware, and so IMHO was trivially easy to detect generically. Regards, Alex ---------------------------------------------------------------- Alex Shipp Senior Anti-virus Technologist MessageLabs Be Secure ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________