RE: [Declude.Virus] Foto.zip

[John Tolmachoff \(Lists\)]

F-Prot seems to be catching this as W32/Newstuff.06   Can some one at Declude add this to the forging list please, ASAP?   John Tolmachoff Engineer/Consultant/Owner eServices For You   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, August 31, 2004 4:22 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Foto.zip   It's a virus - a new bagle variant.  I am seeing it detected by Mcafee as JS/IllWill trojan.  I have seen a signifigant increase in this virus today compared to yesterday.  It was the second most detected virus on one of our servers today.   Here is the mcafee link - http://vil.nai.com/vil/content/v_99242.htm   Virus Scanner Summary Report (MCAFEE)   Total Messages Processed: 34,936 Virus Infected Messages: 2,112 Percentage Infected: 6.05%   VIRUS                         # INFECTED   PERCENTAGE W32/[EMAIL PROTECTED] JS/ILLWILL TROJAN !!!................405........1.16%     Darrell   ---------------------------------------------------------------------------------------------------------------- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers.     ----- Original Message ----- From: "Jeff Maze" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, August 31, 2004 7:04 PM Subject: [Declude.Virus] Foto.zip   > Starting to see this come across: > > Subject: foto > Message: foto > > Attachment: foto.zip (5kb) > > Any ideas? > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list.  To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".    The archives can be found > at http://www.mail-archive.com. >