It appears as though frisk is calling it Virus Name: : HTML/[EMAIL PROTECTED]
On Monday, August 9, 2004 1:16 PM, Andy Schmidt <[EMAIL PROTECTED]> wrote: >Hi: > >As far as I can tell, it's been discovered by McAfee for a few hours (as >usually is the case, when I see these exchanges on this list)! > >08/09/2004 13:30:51 Qb4c66687008ebd6f Scanner 1: Virus= the W32/Bagle.aq!zip >Attachment=price2.zip [17] O >08/09/2004 13:30:51 Qb4c66687008ebd6f >Test3.3f3b3684.1.zip.5932.4.predef.declude.com the W32/Bagle.aq!zip >price2.zip >08/09/2004 13:30:51 Qb4c66687008ebd6f File(s) are INFECTED [ the >W32/Bagle.aq!zip: 13] >08/09/2004 13:30:51 Qb4c66687008ebd6f Scanned: CONTAINS A VIRUS [MIME: 2 >6058] >08/09/2004 13:30:51 Qb4c66687008ebd6f From: [Forged] To: [EMAIL PROTECTED] >[outgoing from 65.118.130.2] > >Best Regards >Andy Schmidt > >H&M Systems Software, Inc. >600 East Crescent Avenue, Suite 203 >Upper Saddle River, NJ 07458-1846 > >Phone: +1 201 934-3414 x20 (Business) >Fax: +1 201 934-9206 > >http://www.HM-Software.com/ > > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze >Sent: Monday, August 09, 2004 02:52 PM >To: [EMAIL PROTECTED] >Subject: RE: [Declude.Virus] strange zip file > > >Have also received price.zip and price_08.zip. I've ended up blocking all >zip files until defs are update (not running Declude Pro). > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry >Sent: Monday, August 09, 2004 1:15 PM >To: [EMAIL PROTECTED] >Subject: Re: [Declude.Virus] strange zip file > > >>We just received a strange zip file with the files as follows >>price/price.exe price.html > >This is a new virus; apparently, no AV companies are detecting it yet. You >can use "BANNAME price.exe" and similar lines to block it (or BANEXT EXE and >BANZIPEXTS ON with Declude Virus Pro). > > -Scott >--- >Declude JunkMail: The advanced anti-spam solution for IMail mailservers >since 2000. Declude Virus: Ultra reliable virus detection and the leader in >mailserver vulnerability detection. Find out what you've been missing: Ask >for a free 30-day evaluation. > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To unsubscribe, just >send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". The archives can be found >at http://www.mail-archive.com. > > > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To unsubscribe, just >send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". The archives can be found >at http://www.mail-archive.com. > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
