[Declude.Virus] New, fast-spreading virus

2004-01-26 Thread R. Scott Perry
FYI, there is a new fast-spreading virus out there, that is too new to be caught by AV programs yet. So far we have seen filenames of body, data, document, file, glszfj, message, readme, test, text, vgsu042a, and vncexdl, with extensions of .pif, .scr, .zip. It may be a wise idea to

RE: [Declude.Virus] New, fast-spreading virus

2004-01-26 Thread Andy Schmidt
Yep - just gone one. The readme.zip contains a readme.scr screen saver. No doubt a virus. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, January 26, 2004 04:34 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] New, fast

RE: [Declude.Virus] New, fast-spreading virus

2004-01-26 Thread Andy Schmidt
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, January 26, 2004 04:34 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] New, fast-spreading virus FYI, there is a new fast-spreading virus out there, that is too new to be caught by AV programs yet. So

RE: [Declude.Virus] New, fast-spreading virus

2004-01-26 Thread John Tolmachoff \(Lists\)
26, 2004 1:46 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] New, fast-spreading virus Yep - just gone one. The readme.zip contains a readme.scr screen saver. No doubt a virus. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott

RE: [Declude.Virus] New, fast-spreading virus

2004-01-26 Thread John Tolmachoff \(Lists\)
: Monday, January 26, 2004 1:34 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] New, fast-spreading virus FYI, there is a new fast-spreading virus out there, that is too new to be caught by AV programs yet. So far we have seen filenames of body, data, document, file, glszfj, message, readme

Re: [Declude.Virus] New, fast-spreading virus

2004-01-26 Thread Matt
, 2004 04:34 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] New, fast-spreading virus FYI, there is a new fast-spreading virus out there, that is too new to be caught by AV programs yet. So far we have seen filenames of body, data, document, file, glszfj, message, readme, test, text, vgsu042a

Re: [Declude.Virus] New, fast-spreading virus: MyDoom

2004-01-26 Thread Jim Matuska
: [Declude.Virus] New, fast-spreading virus: MyDoom Hi, I just got my hourly update - it's now detected by McAfee as: w32/[EMAIL PROTECTED] Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20

Re: [Declude.Virus] New, fast-spreading virus

2004-01-26 Thread Matt
Well, that's a good sign then that JunkMail will at least add a few points to it. If I'm correct, that error also causes BADHEADERS to trip as well, and if you have LOSSENSPAMHEADERS ON, it will skip this test. These messages will also fail CMDSPACE. Matt R. Scott Perry wrote: The bodies

Re: [Declude.Virus] New, fast-spreading virus: MyDoom

2004-01-26 Thread Jim Matuska
So much for the latest update from F-Prot, it does not pick up the new virus, I just received one a few seconds ago, failed spam headers but made it right through virus. Jim Matuska Jr. Computer Tech II CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] --- [This E-mail was scanned for

Re: [Declude.Virus] New, fast-spreading virus: MyDoom

2004-01-26 Thread Jim Matuska
PM Subject: RE: [Declude.Virus] New, fast-spreading virus: MyDoom Hi, I just got my hourly update - it's now detected by McAfee as: w32/[EMAIL PROTECTED] Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201

Re: [Declude.Virus] New, fast-spreading virus: MyDoom

2004-01-26 Thread Jim Matuska
release? Jim Matuska Jr. Computer Tech II CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: Jim Matuska [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 26, 2004 2:33 PM Subject: Re: [Declude.Virus] New, fast-spreading virus: MyDoom F-Prot

RE: [Declude.Virus] New, fast-spreading virus: MyDoom

2004-01-26 Thread Jim Nitterauer
] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Matuska Sent: Monday, January 26, 2004 4:34 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] New, fast-spreading virus: MyDoom F-Prot just released new Definitions that pick up W32/[EMAIL PROTECTED] as well. Jim Matuska Jr. Computer Tech II CCNA Nez

Re: [Declude.Virus] New, fast-spreading virus

2004-01-26 Thread R. Scott Perry
Well, that's a good sign then that JunkMail will at least add a few points to it. If I'm correct, that error also causes BADHEADERS to trip as well... No (this is important). If an E-mail has headers that are [1] common in spam, and [2] rare in legitimate E-mail, it will fail either the

Re: [Declude.Virus] New, fast-spreading virus

2004-01-26 Thread Matt
I forgot that this was due to a combination of issues that can occurr when IMail inserts a header if it receives a message with an IP for the HELO and replied as if that was always the case. You've been through this before with me, and I do understand. Thanks, Matt R. Scott Perry wrote:

RE: [Declude.Virus] New, fast-spreading virus: MyDoom

2004-01-26 Thread John Tolmachoff \(Lists\)
Just MyDoom. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: Keith Johnson [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Monday, January 26, 2004 4:22 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] New, fast-spreading virus

RE: [Declude.Virus] New, fast-spreading virus: MyDoom

2004-01-26 Thread John Tolmachoff \(Lists\)
You know, for how fast spreading this appears to be, I am wondering if it is not being propagated by all those zombies out there. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came

Re: [Declude.Virus] New, fast-spreading virus: MyDoom

2004-01-26 Thread Joshua Levitsky
Technology [5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1] - Original Message - From: Jim Matuska [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 26, 2004 5:18 PM Subject: Re: [Declude.Virus] New, fast-spreading virus: MyDoom So much for the latest update from F-Prot

RE: [Declude.Virus] New, fast-spreading virus: MyDoom

2004-01-26 Thread Todd Holt
] New, fast-spreading virus: MyDoom You mean as opposed to being propagated by lonely housewives? :) John Tolmachoff (Lists) wrote: You know, for how fast spreading this appears to be, I am wondering if it is not being propagated by all those zombies out there. John Tolmachoff