>I have been notified by a client of ours that does secondary virus
>scanning on their internal server that it caught two messages that went
>through our mail server.
>
>The following message had attachment(s) which contained the viruses:
>
> >From : [EMAIL PROTECTED]
>To : [EMAIL PROTECTED]
>Subject : URGENT~!! please HELP~!
>Date : Thu, 9 May 2002 18:03:11 +0900
>Message-ID: <009a01c1f738$5df5bea0$[EMAIL PROTECTED]>
>
>Attachment Virus name Action taken
>------------------------------------------------------------------------
>------
>cf855310370.att VBS.Redolf Removed
>
>Has anyone seen this?
I haven't seen it before. It's also called Redlof, but F-Prot's virus list
doesn't show either "redlof" or "redolf". Computer Associates calls it
"Newly Discovered", but we haven't received any alerts about it (from
Sophos, McAfee, F-Prot, or a few others we get alerts from). The Google
pages that reference it all were updated yesterday, so it sounds like it is
a new virus.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
