I'm guessing this is a generic capture.
While I'm not familiar with the details on F-Prot, most Anti-virus companies will see virus like structures and stop the file even though they don't have the details to give it a name yet.

This might be happening with Bagle.Z (yesterday) or a new Bagle (.AA?) today.

NOTE:
I've been getting hammered with something new that does not yet have a DAT file released to name it.
Lots of SCR, EXE, CPL, etc. (Blocked by extension or invalid file type) in the last couple of hours

Guessing Bagle.AA
http://vil.nai.com/vil/content/v_124875.htm

Greg Little


John Tolmachoff (Lists) wrote:
Declude Virus v1.79 caught the : W32/[EMAIL PROTECTED] virus in your_picture.pif
from [EMAIL PROTECTED] to:  [EMAIL PROTECTED].
  




---
[This E-mail scanned for viruses by Findlay Internet]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to