The notice says it was in an attachment called *.att. What kind of attachment is that?
John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Thursday, May 09, 2002 2:05 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] VBS.Redolf >I have been notified by a client of ours that does secondary virus >scanning on their internal server that it caught two messages that went >through our mail server. > >The following message had attachment(s) which contained the viruses: > > >From : [EMAIL PROTECTED] >To : [EMAIL PROTECTED] >Subject : URGENT~!! please HELP~! >Date : Thu, 9 May 2002 18:03:11 +0900 >Message-ID: <009a01c1f738$5df5bea0$[EMAIL PROTECTED]> > >Attachment Virus name Action taken >----------------------------------------------------------------------- - >------ >cf855310370.att VBS.Redolf Removed > >Has anyone seen this? I haven't seen it before. It's also called Redlof, but F-Prot's virus list doesn't show either "redlof" or "redolf". Computer Associates calls it "Newly Discovered", but we haven't received any alerts about it (from Sophos, McAfee, F-Prot, or a few others we get alerts from). The Google pages that reference it all were updated yesterday, so it sounds like it is a new virus. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
