I posted virustotal results a half hour ago... did you see them?

Darin.


----- Original Message ----- 
From: "Grant Griffith" <[EMAIL PROTECTED]>
To: <declude.virus@declude.com>
Sent: Tuesday, October 10, 2006 2:17 PM
Subject: RE: [Declude.Virus] New Virus?


It does have a .zip file that contains a .exe file inside it.  The message
says it contains a .pdf file, but it is really an .exe file.  I am running
it thru virustotal.com now.

Thanks,
Grant Griffith
Web Application Developer
Enhanced Telecommunications
http://www.etczone.com
812-932-1000

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck,
Andrew
Sent: Tuesday, October 10, 2006 1:32 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Virus?

Sounds like a very popular eBay scam, not a virus.

Was there actually a hostile application attached?

Submit the executable to:

http://www.virustotal.com/en/indexf.html

Or:

http://virusscan.jotti.org/

I believe that both services share unknown executables with the
antivirus vendors.

Or you directly submit the executable to your preferred antivirus
vendor, usually through a web submission form, e.g.:

http://subwiz.trendmicro.com/SubWiz/Default.asp

Or:

http://www.f-prot.com/virusinfo/submission_form.html

But the vendor websites are notorious for hoarding information to get a
competitive advantage (at the expense of the customers of every other
antivirus vendor!).

Andrew 8)


> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> Behalf Of Grant Griffith
> Sent: Tuesday, October 10, 2006 10:21 AM
> To: declude.virus@declude.com
> Subject: [Declude.Virus] New Virus?
>
> Hey All
>
> Has anyone seen the email saying that you purchased a Sony
> VAIO for $2,500?
> We received a bunch of these this morning in our mailboxes
> and am trying to figure out how they made it thru the
> scanners.  What is the place to send them to see if it is
> begin caught?
>
> Thanks,
> Grant Griffith
> Web Application Developer
> Enhanced Telecommunications
> http://www.etczone.com
> 812-932-1000
>
>
>
>
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.
>
>



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.







---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to