Despite the best efforts of the botnet recruiters not many viruses get through the layered defences of most users these days
. Needless to say, not every AV provider is right up to date on all threats and not every user is up to date with the latest definitions anyway. Thus the window of opportunity for the virus distributor. Here's one that made it to my inbox: http://www.spamcop.net/sc?id=z1179387135z3...;action=displayCopying "postcard.exe" into a file (don't do that unless you are confident the thing is NOT going to run off and execute) and loading it into VirusTotal produced mostly negatives except:
QUOTE(received in VirusTotal at 12.29.2006 @ 05:59:40 (CET).)
Fortinet 2.82.0.0 12.29.2006 suspicious
F-Prot 3.16f 12.29.2006 security risk named W32/Tibs.RA
Kaspersky 4.0.2.24 12.29.2006 Trojan-Downloader.Win32.Tibs.jy
Confirmation, as far as I am concerned, of the incipient foray of the recruiters. And a heap of AVs (would) have missed it.F-Prot 3.16f 12.29.2006 security risk named W32/Tibs.RA
Kaspersky 4.0.2.24 12.29.2006 Trojan-Downloader.Win32.Tibs.jy
Never open untrusted mail, never run untrusted executables (remembering all negatives from VirusTotal is NOT complete assurance) - but sometimes it is nice to know/ remind yourself what such discipline is all about.
