Re: [Clamav-users] Worm.SCO.A
Notice, the Sexy name gets the media attention though Shawn On Thu, 29 Jan 2004 12:15:17 +0800 Fritz Mesedilla [EMAIL PROTECTED] exclaimed: They are the same. AV vendors just have their way of naming the same virus. We call it Worm.SCO.A. McAfee calls it MyDoom. Symantec calls it Novarg. Cheers, --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Worm.SCO.A
On Wed, Jan 28, 2004 at 01:01:35PM -0300, Patricia Viana wrote : Hi. [...] It seams to be the same virus as MyDoom or Novarg. Can anyone confirm this?! Thanks. Att, Patrícia Viana Indeed, all those names belong to the same virus. please, configure your mail client to avoid html mails like yours. /ddm -- Denis De Messemacker GnuPG Key-ID: 0x02787880 [EMAIL PROTECTED] http://www.e-labs.org [EMAIL PROTECTED] http://www.ClamAV.net - A GPL virus scanner --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Worm.SCO.A
ClamAV was picking up the original version here 6 hours before McAfee had their 4319 DATs out, and detected the B variant here yesterday at least 4 hours before McAfee's 4320 DATs were released. You guys deserve medals. A big heartfelt thank you to all the ClamAV team (and virus submitters). Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kevin Spicer Sent: 29 January 2004 00:01 To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] Worm.SCO.A On Wed, 2004-01-28 at 16:01, Patricia Viana wrote: Hi. My SMTP filter running ClamAV is blocking a huge amount of messages with the Worm.SCO.A. It seams to be the same virus as MyDoom or Novarg. Can anyone confirm this?! That is correct. Clam had a signature whilst the commercial vendors were still busy thinking up names, hence the difference. BMRB International http://www.bmrb.co.uk +44 (0)20 8566 5000 _ This message (and any attachment) is intended only for the recipient and may contain confidential and/or privileged material. If you have received this in error, please contact the sender and delete this message immediately. Disclosure, copying or other action taken in respect of this email or in reliance on it is prohibited. BMRB International Limited accepts no liability in relation to any personal emails, or content of any email which does not directly relate to our business. --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
RE: [Clamav-users] Worm.SCO.A
They are the same. AV vendors just have their way of naming the same virus. We call it Worm.SCO.A. McAfee calls it MyDoom. Symantec calls it Novarg. Cheers, fritz www.mesedilla.com --- + Basta Ikaw Lord -Original Message- From: Patricia Viana [mailto:[EMAIL PROTECTED] Sent: Thursday, January 29, 2004 12:02 AM To: [EMAIL PROTECTED] Subject: [Clamav-users] Worm.SCO.A Hi. My SMTP filter running ClamAV is blocking a huge amount of messages with the Worm.SCO.A. It seams to be the same virus as MyDoom or Novarg. Can anyone confirm this?! Thanks. Att, Patrícia Viana Network Administrator Eletrobolt Power Plant - Rio de Janeiro - BRAZIL Tel: +55 (21) 2665-9236 Cel: +55 (21) 9351-0007 Fax: + 55 (21) 2665-9248 mailto:[EMAIL PROTECTED] Visit us @ www.eletrobolt.com.br! -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender immediately by e-mail and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. Overture Media, Inc. Direct Line: (632) 635-4785 Trunkline: (632) 631-8971 Local 146 Fax: (632) 637-2206 Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave., Quezon City 1100 --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Worm.SCO.A
You are exactly right. Hit us on Monday and hasn't stopped since. -- Jeff Hi. My SMTP filter running ClamAV is blocking a huge amount of messages with the Worm.SCO.A. It seams to be the same virus as MyDoom or Novarg. Can anyone confirm this?! Thanks. Att, Patrícia Viana Network Administrator Eletrobolt Power Plant - Rio de Janeiro - BRAZIL Tel: +55 (21) 2665-9236 Cel: +55 (21) 9351-0007 Fax: + 55 (21) 2665-9248 mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Visit us @ www.eletrobolt.com.br outbind://38/www.eletrobolt.com.br ! --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Worm.SCO.A
On Wed, 2004-01-28 at 16:01, Patricia Viana wrote: Hi. My SMTP filter running ClamAV is blocking a huge amount of messages with the Worm.SCO.A. It seams to be the same virus as MyDoom or Novarg. Can anyone confirm this?! That is correct. Clam had a signature whilst the commercial vendors were still busy thinking up names, hence the difference. BMRB International http://www.bmrb.co.uk +44 (0)20 8566 5000 _ This message (and any attachment) is intended only for the recipient and may contain confidential and/or privileged material. If you have received this in error, please contact the sender and delete this message immediately. Disclosure, copying or other action taken in respect of this email or in reliance on it is prohibited. BMRB International Limited accepts no liability in relation to any personal emails, or content of any email which does not directly relate to our business. --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
