RE: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-16 Thread Markus Gufler
Hi Kami, (Nice to read you) As suggested the best path at the moment could be: BANZIPEXTSON Yes this is necessary and unfortunately we can't still choose to block only certain extensions within zip-files from all the extensions we block as direct attachment. Something like BANZIPEXT exe

[Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread Goran Jovanovic
Hi, I am getting a bunch of exe in zip files being banned right now. I have grabbed one of them it is called marie.zip and has a single exe in it called s3700020.exe and when you put it on your desktop is has the standard jpeg icon associated with it. My F-Prot, McAfee and Symantec scanners are

RE: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread John T \(Lists\)
www.virustotal.com This is a very small e-mail, the D file being only 11 kb. Some of the small AV companies are reporting it as a Bagle variant and F-Prot is reporting it as MitGlieder.GU although it is not catching it on the server. John T eServices For You -Original Message- From:

RE: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread Markus Gufler
www.virustotal.com (se me previous posting for results) At the moment i consider blocking at least temporaly eye in zips and update the virus definitions Markus -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Thursday,

RE: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread Colbeck, Andrew
You can upload it to this website where it will be scanned by all the leading virus vendors that haven't sent them a cease-and-desist order: http://www.virustotal.com/flash/index_en.html And you can also upload it to here to have their 'bot run the application in a sandbox and report back to you

RE: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread Goran Jovanovic
I tried www.totalvirus.com and it is an ad site. Thank you Goran Jovanovic Omega Network Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Thursday, December 15, 2005 10:45 AM To:

RE: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread Goran Jovanovic
Yup this is the one I got as well. I just did a manual update of F-Prot and it found a new SIGN.DEF and SIGN2.DEF Maybe these signatures will find it now. Goran Jovanovic Omega Network Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED]

RE: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread Goran Jovanovic
As one of my clients like to say It is a Code 18 problem Problem is 18 inches from the keyboard They are a school so it is true a lot of the time :) Goran Jovanovic Omega Network Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.Virus- [EMAIL PROTECTED] On

RE: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread John T \(Lists\)
Uh, keyboard virus? ;) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Thursday, December 15, 2005 7:53 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Where to send exe's to check if

Re: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread Bill Landry
Hmmm, maybe try switching that from totalvirus to virustotal. Bill - Original Message - From: Goran Jovanovic [EMAIL PROTECTED] To: Declude.Virus@declude.com Sent: Thursday, December 15, 2005 7:53 AM Subject: RE: [Declude.Virus] Where to send exe's to check if they are a virus? I

RE: [Declude.Virus] Where to send exe's to check if they are a virus?

2005-12-15 Thread Kami Razvan
Hi Markus: I just updated F-Prot and scanned the one I received called Katherine.zip. It shows it as Suspicious file. McAfee is not detecting it. As suggested the best path at the moment could be: BANZIPEXTS ON We have: - Grisoft AVG - F-Prot - Clam AV - McAfee Only F-Prot with the