Looks like varying attachment names. I got one thats excel_table.zip
- Original Message -
From: David Dodell [EMAIL PROTECTED]
To: John T (Lists) Declude.Virus@declude.com
Sent: Tuesday, November 15, 2005 6:50 AM
Subject: Re: [Declude.Virus] New Sober to be released, possible variation
.
- Original Message -
From: Doug Anderson [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, November 15, 2005 8:24 AM
Subject: Re: [Declude.Virus] New Sober to be released, possible variation?
Looks like varying attachment names. I got one thats excel_table.zip
- Original Message
Darin.
- Original Message -
From: Doug Anderson [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, November 15, 2005 8:24 AM
Subject: Re: [Declude.Virus] New Sober to be released,
possible variation?
Looks like varying attachment names. I got one thats
Thanks, Uwe. I'm sure there will be more.
Darin.
- Original Message -
From: Info Wind [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, November 15, 2005 8:52 AM
Subject: Re: [Declude.Virus] New Sober to be released, possible variation?
We get one with foto.zip
]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Tuesday, November 15, 2005 6:05 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] New Sober to be released,
possible variation?
Most the new Sober variants are expected to be low volume, so
I'm not surprised that Netsky.P
]
To: Declude.Virus@declude.com
Sent: Tuesday, November 15, 2005 11:57 AM
Subject: RE: [Declude.Virus] New Sober to be released, possible variation?
There are very interesting details in Trend Micro's writeup.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FS
OBER%2EADVSect=T
Of Darin Cox
Sent: Tuesday, November 15, 2005 10:16 AM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] New Sober to be released,
possible variation?
Another one to block...
BANNAME Accept_e-Text.zip
The list so far is
# Added 11/15/2005 to handle new Sober.R, S, T, U, V, W
Message -
From: Colbeck, Andrew [EMAIL PROTECTED]
To: Declude.Virus@declude.com
Sent: Tuesday, November 15, 2005 11:57 AM
Subject: RE: [Declude.Virus] New Sober to be released, possible variation?
There are very interesting details in Trend Micro's writeup.
http://www.trendmicro.com
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] New Sober to be released, possible
variation?
And another:
BANNAME packed-password_text.zip
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Darin Cox
Sent: Tuesday, November
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John T (Lists)
Sent: Tuesday, November 15, 2005 2:30 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] New Sober to be released, possible
variation?
And another:
BANNAME packed-password_text.zip
John T
eServices
Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Mark Reimer
Sent: Tuesday, November 15, 2005 12:49 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] New Sober to be released, possible variation?
If we are banning extensions within zip files we should
11 matches
Mail list logo