We just received a strange zip file with the files as follows
price/price.exe
price.html
price.html installs the .exe
Our scanners didn't pick up anything strange.. but there is no way I would
open it.
I sent it to virustrap, Scott could you take a look.
Regards
Luis Arangoo
__
[Email
We just received a strange zip file with the files as follows
price/price.exe
price.html
This is a new virus; apparently, no AV companies are detecting it yet. You
can use BANNAME price.exe and similar lines to block it (or BANEXT EXE
and BANZIPEXTS ON with Declude Virus Pro).
microsoft attachments
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting S.A.
Luis Alberto Arango
Sent: Monday, August 09, 2004 2:16 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] strange zip file
We just received a strange zip file
Thanks I just did.. Luis
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.Virus-
[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Monday, August 09, 2004 1:15 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] strange zip file
We just received a strange zip file
PROTECTED]
Subject: Re: [Declude.Virus] strange zip file
We just received a strange zip file with the files as follows
price/price.exe price.html
This is a new virus; apparently, no AV companies are detecting it yet. You
can use BANNAME price.exe and similar lines to block it (or BANEXT EXE
] On Behalf Of Panda Consulting S.A. Luis Alberto Arango
Sent: Monday, August 09, 2004 1:45 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] strange zip file
Thanks I just did.. Luis
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.Virus-
[EMAIL PROTECTED] On Behalf Of R
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze
Sent: Monday, August 09, 2004 02:52 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] strange zip file
Have also received price.zip and price_08.zip. I've ended up blocking all
zip files until defs are update (not running Declude Pro
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] strange zip file
We just received a strange zip file with the files as follows
price/price.exe price.html
This is a new virus; apparently, no AV companies are detecting it yet. You
can use BANNAME price.exe and similar lines to block
Apparently it's another variant of the ubiquitous Bagle worm.
http://www.eweek.com/article2/0,1759,1633739,00.asp
-M
- Original Message -
From: Bob McGregor
To: [EMAIL PROTECTED]
Sent: Monday, August 09, 2004 3:18 PM
Subject: Re: [Declude.Virus] strange zip file
It appears as though
