Symantec has 3 new Bagle variants listed at www.sarc.com this morning... Thanks for the Heads Up !!!!
Don ----- Original Message ----- From: "Markus Gufler" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, October 29, 2004 4:30 AM Subject: [Declude.Virus] HEADS UP there is something strange out > My F-prot/Mcafee scanners are detecting a hug enumbers of "Unknown Virus"es > this morning. > > Looking at the original message headers there are always HELO strings like > > Beatrix.net > Arianna.net > Margareth1.org > Margareth1.com > > > This moment I've received a warning from my own server that I has send a > virus to another local recipient. Looking to thy smtp-logfile the sending IP > was not mine. > > Even if all eml-file (recip, sender_local, sender_remote) contains a line > > SKIPIFVIRUSNAMEHAS Unknown Virus > > This warnings are still send out > > I've tried also to add > > FORGINGVIRUS Unknown Virus > > But the warnings are still send out. > Thes same thing is happening also on another Imail/declude server. > > What the hell is going on here? > > Markus > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
