Re: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread Doug Anderson
Looks like varying attachment names. I got one thats excel_table.zip - Original Message - From: David Dodell [EMAIL PROTECTED] To: John T (Lists) Declude.Virus@declude.com Sent: Tuesday, November 15, 2005 6:50 AM Subject: Re: [Declude.Virus] New Sober to be released, possible variation

Re: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread Darin Cox
. - Original Message - From: Doug Anderson [EMAIL PROTECTED] To: Declude.Virus@declude.com Sent: Tuesday, November 15, 2005 8:24 AM Subject: Re: [Declude.Virus] New Sober to be released, possible variation? Looks like varying attachment names. I got one thats excel_table.zip - Original Message

RE: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread Markus Gufler
Darin. - Original Message - From: Doug Anderson [EMAIL PROTECTED] To: Declude.Virus@declude.com Sent: Tuesday, November 15, 2005 8:24 AM Subject: Re: [Declude.Virus] New Sober to be released, possible variation? Looks like varying attachment names. I got one thats

Re: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread Darin Cox
Thanks, Uwe. I'm sure there will be more. Darin. - Original Message - From: Info Wind [EMAIL PROTECTED] To: Declude.Virus@declude.com Sent: Tuesday, November 15, 2005 8:52 AM Subject: Re: [Declude.Virus] New Sober to be released, possible variation? We get one with foto.zip

RE: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread Colbeck, Andrew
] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Tuesday, November 15, 2005 6:05 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] New Sober to be released, possible variation? Most the new Sober variants are expected to be low volume, so I'm not surprised that Netsky.P

Re: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread Darin Cox
] To: Declude.Virus@declude.com Sent: Tuesday, November 15, 2005 11:57 AM Subject: RE: [Declude.Virus] New Sober to be released, possible variation? There are very interesting details in Trend Micro's writeup. http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FS OBER%2EADVSect=T

RE: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread Colbeck, Andrew
Of Darin Cox Sent: Tuesday, November 15, 2005 10:16 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] New Sober to be released, possible variation? Another one to block... BANNAME Accept_e-Text.zip The list so far is # Added 11/15/2005 to handle new Sober.R, S, T, U, V, W

RE: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread John T \(Lists\)
Message - From: Colbeck, Andrew [EMAIL PROTECTED] To: Declude.Virus@declude.com Sent: Tuesday, November 15, 2005 11:57 AM Subject: RE: [Declude.Virus] New Sober to be released, possible variation? There are very interesting details in Trend Micro's writeup. http://www.trendmicro.com

RE: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread Mark Reimer
To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] New Sober to be released, possible variation? And another: BANNAME packed-password_text.zip John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Tuesday, November

Re: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread Darrell \([EMAIL PROTECTED])
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John T (Lists) Sent: Tuesday, November 15, 2005 2:30 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] New Sober to be released, possible variation? And another: BANNAME packed-password_text.zip John T eServices

RE: [Declude.Virus] New Sober to be released, possible variation?

2005-11-15 Thread John T \(Lists\)
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Reimer Sent: Tuesday, November 15, 2005 12:49 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] New Sober to be released, possible variation? If we are banning extensions within zip files we should