I didn't have f-prot with that line until I saw nav desktop catching these. I then submitted it to McAfee and they sent me a extra.dat file and said it would be in their next dat set. I haven't seen the new dat for it yet. Their name: "Identified: W32/Bagle.dll.dr".
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tyler Jensen Sent: Wednesday, April 20, 2005 7:22 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] New Spam or Virus????!! I had something similar over the weekend. Standard zip file. If you are using F-Prot you may want to add VirusCode 8 to the config. This will stop them as Unknown Virus. Check your virus log and you may see some code 8 errors in it. Adding viruscode 8 will at least stop them. Ouside of email NAV was calling it Trojan.Tooso.H and F-Prot was calling it w32/mitglieder.c. I submitted my findings to Declude support earlier in the week and spoke with a someone yesterday. Sent the file to him and he said the AVG called it a Bagle of some sort. What is strange is outside of email, f-prot was detecting it. But without viruscode 8, nothing. Tyler ---------- Original Message ---------------------------------- From: "Chuck Schick" <[EMAIL PROTECTED]> Reply-To: Declude.JunkMail@declude.com Date: Wed, 20 Apr 2005 18:05:08 -0600 >Starting to see messages that have a zip attachement with the format 5.zip >or 7.zip - I do not know if it is spam or a virus. Anyone else seeing >this? Virus scanner is not catching it so I do not know if it is a virus or >not. > >Chuck Schick >Warp 8, Inc. >(303)-421-5140 >www.warp8.com > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. >--- >[This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
