Re: [Declude.Virus] EXE in a Zip File

[Greg Little]

It's a game of "catch me if you can". Mytob has been change frequently (often several times per day) and then sent (seeded) to 000's of addresses, before the AV companies have a chance to react. (I've been getting a few reports each week on these.) It makes for about a 1 day window on many of these. For details see http://vil.nai.com/vil/content/v_134084.htm Your AV program should be catching this one soon. (McAfee calls it W32/[EMAIL PROTECTED] . DAT 4506, due out in the next couple of hours, should stop it.) While I expect some good Declude blocking suggestion based on Subject line, File name, Sender, etc. the next version of this pest is as much a target and it's hard to guess what that will look like. Greg Little Kevin Shimwell wrote: Good morning   Im getting alot of calls from yesterday on customers getting and attached zip. with and exe file X-Virus-Scan-Result: Repaired 5542 [EMAIL PROTECTED]. Subject: Your Email Account is Suspended For Security Reasons WHat do I need to do to stop this? I saw this once time before. Im running declude virus with Fprot as the scanner.     Kevin Shimwell --- [This E-mail scanned for viruses by Findlay Internet] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.