Well good ole' declude and Dr. Solomon caught the accstat.exe just fine.
"The spool file name is D41443b6.SMD.
The virus is named the W95/MTX.gen@M virus !!!
The filename was ACCSTAT.EXE"
Thanks All
Dan
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Dan Spangenberg
> Sent: Tuesday, August 14, 2001 8:53 AM
> To: [EMAIL PROTECTED]
> Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue
>
>
> I never did get the file, could someone please send it to me, offlist of
> course?
>
> [EMAIL PROTECTED]
>
> Thanks
> Dan
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens
> > Sent: Tuesday, August 14, 2001 7:33 AM
> > To: [EMAIL PROTECTED]
> > Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue
> >
> >
> > ditto here please. [EMAIL PROTECTED]
> >
> > TIA
> >
> > Craig.
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Crawford
> > Sent: Monday, August 13, 2001 12:06 PM
> > To: [EMAIL PROTECTED]
> > Subject: REVDNS:RE: [Declude.Virus] Virus Issue
> >
> >
> > could you send me that file as well? off list
> > [EMAIL PROTECTED]
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of Jonathan
> > > Sent: Monday, August 13, 2001 10:23 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: Re: [Declude.Virus] Virus Issue
> > >
> > >
> > > Scan it with housecall.antivirus.com (i sent it to you off-list).
> > > Odds of
> > > it intentionally being sent are pretty null .. came from a
> > random address
> > > in china. Housecall did pick it up .. (as magistr?) I dont remember ..
> > >
> > > Jonathan
> > >
> > > At 10:17 AM 8/13/2001 -0400, you wrote:
> > >
> > > >>Usenet, for one .. I've seen it a couple other places as well.
> > > >
> > > >Do you know what the name of the virus is? I just checked
> > > McAfee as well,
> > > >and couldn't find info on it (although searching of their virus
> > > >information database is extremely limited). Any chance the
> accstat.exe
> > > >was being sent intentionally, but that it happened to be
> > > infected by a virus?
> > > > -Scott
> > > >
> > > >This E-mail came from the Declude.Virus mailing list. To
> > > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > >type "unsubscribe Declude.Virus". You can E-mail
> > > >[EMAIL PROTECTED] for assistance. You can visit our web
> > > >site at http://www.declude.com .
> > >
> > > This E-mail came from the Declude.Virus mailing list. To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.Virus". You can E-mail
> > > [EMAIL PROTECTED] for assistance. You can visit our web
> > > site at http://www.declude.com .
> > >
> > >
> >
> > This E-mail came from the Declude.Virus mailing list. To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus". You can E-mail
> > [EMAIL PROTECTED] for assistance. You can visit our web
> > site at http://www.declude.com .
> >
> > This E-mail came from the Declude.Virus mailing list. To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus". You can E-mail
> > [EMAIL PROTECTED] for assistance. You can visit our web
> > site at http://www.declude.com .
> >
>
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". You can E-mail
> [EMAIL PROTECTED] for assistance. You can visit our web
> site at http://www.declude.com .
>
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
