[Full-Disclosure] Re: Potentially new Virus

[Feher Tamas <etomcat@freemail.hu>]

Hello,

>question: why is it so damn hard for us to search for info
>on viruses by subject, msg body, or/and symptoms???

Many viruses use a wide range of subjects and have a set of message 
body primitives prepared, so they can cheat message filtering.

In order to check the virus sample, you could use web forms or 
automated e-mail addresses:

Kaspersky Labs e-mail robot for samples (fastest to react):
newvirus@kaspersky.com

Trend Micro Web form:
http://subwiz.trendmicro.com/SubWiz/Wizard.asp?opgWizard=7

McAfee (NAI) e-mail at
virus_research@nai.com

CA (InoculateIT) web sample submit form:
https://www.my-etrust.com/services/virusSampleForm.cfm

If you submit a file and it is an already known malware, the form / auto-
reply will tell you about it immediately. If the sample is new, the AV 
guys will process it and send you a reply ASAP. (Average 1,5-4 hours, 
maybe a little more at weekends).

This way you don't spam the mailing list and get a rapid response 7x24.

Sincerely: Tamas Feher from Hungary.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html