[Declude.Virus] RAR followup

2005-04-14 Thread John Carter
Starting to see repeat names. Reminds me of viruses sent by RAR last year
(and caught by scanners.) Names: Forest, It_is_about_you, prices, jokes

John

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] RAR followup

2005-04-14 Thread Matt
McAfee has been picking this up as W32/[EMAIL PROTECTED] since the first 
copy arrived at 3 p.m. EST.  I assume from the name that this is a 
generic Bagle detection heuristic that pre-existed the virus.

Matt

John Carter wrote:
Starting to see repeat names. Reminds me of viruses sent by RAR last year
(and caught by scanners.) Names: Forest, It_is_about_you, prices, jokes
John
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
 

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] RAR followup

2005-04-14 Thread Darin Cox
We just saw a rash of them as well.  Same patterns you mentioned.  Glad
we're holding on RAR!

Darin.


- Original Message - 
From: John Carter [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Thursday, April 14, 2005 5:29 PM
Subject: [Declude.Virus] RAR followup


Starting to see repeat names. Reminds me of viruses sent by RAR last year
(and caught by scanners.) Names: Forest, It_is_about_you, prices, jokes

John

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.