I caught numerous viruses yesterday that was unidentified. (11:39) Declude Virus v1.61 caught the virus !!! virus in href.bat However right after todays virus signature update (done every 24 hours at 11:50am) I caught a Bugbear (11:53) Declude Virus v1.61 caught the W32/Bugbear@MM virus !!! virus in Circstnt.avi.exe Size wise they are different so not sure if they where/are the same or not.
Tuesday, October 1, 2002, 10:21:35 AM, you wrote: KL> Hello All, KL> Just to give you some update. Thanks for your comments Scott. We did not see KL> any Bugbear yesterday or last night, but starting this morning Declude and KL> F-Prot have stopped over 12 copies and they are now appearing about every 10 KL> to 15 minutes. KL> Looking at what the payload does, I'm just glad this virus did not get into KL> our customer base. KL> Thanks for the GREAT Product. KL> Ken KL> ----- Original Message ----- KL> From: "R. Scott Perry" <[EMAIL PROTECTED]> KL> To: <[EMAIL PROTECTED]> KL> Sent: Tuesday, October 01, 2002 10:49 AM KL> Subject: Re: [Declude.Virus] Bugbear forged? >> >> >I've seen here only a few messages infected by Bugbear. Are this worm >> >forging the sender's emailadress? >> >Some virus-warnings returns with a NDR, other seems to be delivered >> >succesfully... >> >> It seems that it isn't known yet whether or not it forges the return KL> address. >> >> We haven't seen a single copy here yet, so I'm guessing this one was hyped >> a bit more than it should have been. It also appears to use the Outlook >> MIME Headers vulnerability, so it would get caught automatically with any >> mailserver AV program that detects the vulnerabilities (such as Declude >> Virus) as well as a number of content scanners. >> -Scott >> >> --- >> [This E-mail was scanned for viruses by Declude Virus KL> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.Virus mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.Virus". The archives can be found >> at http://www.mail-archive.com. >> >> KL> --- KL> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] KL> --- KL> This E-mail came from the Declude.Virus mailing list. To KL> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and KL> type "unsubscribe Declude.Virus". The archives can be found KL> at http://www.mail-archive.com. KL> --- KL> [This E-mail scanned for viruses by Declude Virus] Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network http://www.fament.com Phone : 620-231-7777 Fax : 620-231-4066 eBay UserID : macahan - Your Full Time Professionals - --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
