Expected since mcafee and solomon share the same engine.
FWIW: Norman does not catch it either.
Kaspersky identifies it as i-worm/magistr.corrupted. I found the "corrupted"
interesting, don't know what it really means though.
Jerry
----- Original Message -----
From: "Dan Spangenberg" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, August 14, 2001 1:12 PM
Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue
> Well good ole' declude and Dr. Solomon caught the accstat.exe just fine.
>
> "The spool file name is D41443b6.SMD.
> The virus is named the W95/MTX.gen@M virus !!!
> The filename was ACCSTAT.EXE"
>
> Thanks All
> Dan
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Dan Spangenberg
> > Sent: Tuesday, August 14, 2001 8:53 AM
> > To: [EMAIL PROTECTED]
> > Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue
> >
> >
> > I never did get the file, could someone please send it to me, offlist of
> > course?
> >
> > [EMAIL PROTECTED]
> >
> > Thanks
> > Dan
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens
> > > Sent: Tuesday, August 14, 2001 7:33 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue
> > >
> > >
> > > ditto here please. [EMAIL PROTECTED]
> > >
> > > TIA
> > >
> > > Craig.
> > >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Crawford
> > > Sent: Monday, August 13, 2001 12:06 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: REVDNS:RE: [Declude.Virus] Virus Issue
> > >
> > >
> > > could you send me that file as well? off list
> > > [EMAIL PROTECTED]
> > >
> > > > -----Original Message-----
> > > > From: [EMAIL PROTECTED]
> > > > [mailto:[EMAIL PROTECTED]]On Behalf Of Jonathan
> > > > Sent: Monday, August 13, 2001 10:23 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: Re: [Declude.Virus] Virus Issue
> > > >
> > > >
> > > > Scan it with housecall.antivirus.com (i sent it to you off-list).
> > > > Odds of
> > > > it intentionally being sent are pretty null .. came from a
> > > random address
> > > > in china. Housecall did pick it up .. (as magistr?) I dont remember ..
> > > >
> > > > Jonathan
> > > >
> > > > At 10:17 AM 8/13/2001 -0400, you wrote:
> > > >
> > > > >>Usenet, for one .. I've seen it a couple other places as well.
> > > > >
> > > > >Do you know what the name of the virus is? I just checked
> > > > McAfee as well,
> > > > >and couldn't find info on it (although searching of their virus
> > > > >information database is extremely limited). Any chance the
> > accstat.exe
> > > > >was being sent intentionally, but that it happened to be
> > > > infected by a virus?
> > > > > -Scott
> > > > >
> > > > >This E-mail came from the Declude.Virus mailing list. To
> > > > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > > >type "unsubscribe Declude.Virus". You can E-mail
> > > > >[EMAIL PROTECTED] for assistance. You can visit our web
> > > > >site at http://www.declude.com .
> > > >
> > > > This E-mail came from the Declude.Virus mailing list. To
> > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > > type "unsubscribe Declude.Virus". You can E-mail
> > > > [EMAIL PROTECTED] for assistance. You can visit our web
> > > > site at http://www.declude.com .
> > > >
> > > >
> > >
> > > This E-mail came from the Declude.Virus mailing list. To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.Virus". You can E-mail
> > > [EMAIL PROTECTED] for assistance. You can visit our web
> > > site at http://www.declude.com .
> > >
> > > This E-mail came from the Declude.Virus mailing list. To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.Virus". You can E-mail
> > > [EMAIL PROTECTED] for assistance. You can visit our web
> > > site at http://www.declude.com .
> > >
> >
> > This E-mail came from the Declude.Virus mailing list. To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus". You can E-mail
> > [EMAIL PROTECTED] for assistance. You can visit our web
> > site at http://www.declude.com .
> >
>
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". You can E-mail
> [EMAIL PROTECTED] for assistance. You can visit our web
> site at http://www.declude.com .
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
