Trend is now calling it bagle.AC and has not yet released a pattern update for it.
http://www.trendmicro.com/vinfo/ Douglas Traylor MIS Department Harbison-Fischer Mfg Co. (817)297-2211 x210 ----- Original Message ----- From: "Michael Greenberg" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 09, 2004 2:07 PM Subject: RE: [IMail Forum] Strange new e-mail > Has anyone released a self contained scanner/remover for this virus. And > does anyone know it's actual name. I can't find much info on TROJ_ILLWILL.A > > Thanks > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting > S.A. Luis Alberto Arango > Sent: Monday, August 09, 2004 3:00 PM > To: [EMAIL PROTECTED] > Subject: RE: [IMail Forum] Strange new e-mail > > FYI: > Getting over 200 in the past 30 minutes > Different file names > new__price.zip > new_price.zip > price_new.zip > price__new.zip > price.zip > newprice.zip > 08_price.zip > price_08.zip > price2.zip > > all blocked by declude.. (.exe extensions), however F-Prot already updated > signature files to stop it. > > Luis Arango > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:IMail_Forum- > > [EMAIL PROTECTED] On Behalf Of Robert Smith > > Sent: Monday, August 09, 2004 1:25 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [IMail Forum] Strange new e-mail > > > > Internet Storm Center says it looks like a new bagle variant and some AV > > now > > have definitions. > > > > Robert Smith > > Futur@ ISP > > ----- Original Message ----- > > From: "R. Scott Perry" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Monday, August 09, 2004 1:10 PM > > Subject: RE: [IMail Forum] Strange new e-mail > > > > > > > > > > >I am using Declude virus as well, it is allowing them through. > > > > > > > >Is there a setting that I am missing to block .exe's within Zips? > > > > > > If you are using Declude Virus Pro, you can use the following two lines > > in > > > your virus.cfg file: > > > > > > BANEXT EXE > > > BANZIPEXTS ON > > > > > > This will block all .exe files, both standard and in .ZIP files, as a > > > temporary measure to block this new virus before virus definitions are > > > updated to catch it. Apparently, no AV company yet has reported that > > they > > > catch this (it first started spreading about 2 hours ago, however). > > > > > > -Scott > > > --- > > > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > > > since 2000. > > > Declude Virus: Ultra reliable virus detection and the leader in > > mailserver > > > vulnerability detection. > > > Find out what you've been missing: Ask for a free 30-day evaluation. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > > List Archive: http://www.mail- > > archive.com/imail_forum%40list.ipswitch.com/ > > > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > ______ > > [Email scanned for viruses by Panda Consulting -www.pandacons.com-] > > [Email escaneado contra virus por Panda Consulting -www.pandacons.com-] > > > ______ > [Email scanned for viruses by Panda Consulting -www.pandacons.com-] > [Email escaneado contra virus por Panda Consulting -www.pandacons.com-] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
