F-Secure now detects Rob's sample:
Email-Worm.Win32.Bagle.de, F-Secure AVP, Email-Worm.Win32.Bagle.de
cheers,
wolfgang
BTW - Due to what Wolfgang and Pierre have reported about F-Secure's fast
turnaround and distribution of definitions, I downloaded and started testing
an evaluation version of
RE: missed by great AV programs
SEE:
http://www.pvsys.com/missedvirus.txt
This came in today and I ran this against ClamAV, McAfee, Sophos... all with
the latest definitions
(at least as of the time that I write this, 9/19/05 3:45 pm EST).
It is strange that NONE of these 3 catch this message
Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
Rob McEwen (PowerView Systems) wrote:
RE: missed by great AV programs
SEE:
http://www.pvsys.com/missedvirus.txt
This came in today and I ran this against ClamAV, McAfee, Sophos... all with
the latest definitions
(at least
We submitted the ones here to ClamAV this afternoon - file I am seeing here is
new___price.zip.
quote who=M.Lewis
Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
Rob McEwen (PowerView Systems) wrote:
RE: missed by great AV programs
SEE:
http://www.pvsys.com
, September 19, 2005 3:55 PM
To: users@spamassassin.apache.org
Subject: missed by AV programs
RE: missed by great AV programs
SEE:
http://www.pvsys.com/missedvirus.txt
This came in today and I ran this against ClamAV, McAfee, Sophos... all with
the latest definitions
(at least as of the time that I
Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
Good point. OK. Per your suggestion, I just submitted it to ClamAV (since that
is the one I actually use for my mail server).
I wouldn't have brought it up on this list except I've never seen this happen
before...
Rob McEwen (PowerView Systems) wrote:
RE: missed by great AV programs
SEE:
http://www.pvsys.com/missedvirus.txt
Update: it's probaby this new Bagle variant (F-Secure is one of the fastest to
update their web site):
http://www.f-secure.com/v-descs/bagle_bi.shtml
Pierre
Rob McEwen (PowerView Systems) wrote:
Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
Good point. OK. Per your suggestion, I just submitted it to ClamAV (since that
is the one I actually use for my mail server).
I wouldn't have brought it up on this list except I've
@spamassassin.apache.org
Sent: Monday, September 19, 2005 2:11 PM
Subject: Re: missed by AV programs
| Rob McEwen (PowerView Systems) wrote:
| Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
|
|
| Good point. OK. Per your suggestion, I just submitted it to ClamAV (since
that is the one I
In an older episode (Monday, 19. September 2005 22:07), Rob McEwen (PowerView
Systems) wrote:
Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
Good point. OK. Per your suggestion, I just submitted it to ClamAV (since
that is the one I actually use for my mail server).
-- Forwarded Message --
Subject: 1924337 - File Submission
Date: Monday, 19. September 2005 22:49
From: Virus Research [EMAIL PROTECTED]
AVERT Labs - Beaverton
Current Scan Engine Version:4.4.00
Current DAT Version:4584
Thank you for your submission.
Analysis ID: 1924337
...
RE: missed by great AV programs
SEE:
http://www.pvsys.com/missedvirus.txt
This came in today and I ran this against ClamAV, McAfee, Sophos... all with
the latest definitions
(at least as of the time that I write this, 9/19/05 3:45 pm EST).
It is strange that NONE of these 3 catch
In an older episode (Monday, 19. September 2005 22:09), Pierre Thomson wrote:
Rob McEwen (PowerView Systems) wrote:
RE: missed by great AV programs
SEE:
http://www.pvsys.com/missedvirus.txt
Update: it's probaby this new Bagle variant (F-Secure is one of the fastest
to update
On Mon, Sep 19, 2005 at 03:55:12PM -0400, Rob McEwen (PowerView Systems) wrote:
RE: missed by great AV programs
(keeping in mind that these I'm mentioned may catch up by the time you read
this)
Right, in the time since you wrote this, NAI (McAffee) first
sent an extra ALERT-Letter
14 matches
Mail list logo
