F-prot support - I reported that they weren't stopping this one, and within
2 hours wanted a copy! I sent it to them - I'll keep you posted...
they are in good company still though - symantec doesn't catch it either.
Hopefully it is a corrupted non voltile strain??? Don't want my 20 bucks for
20 users to go to waste :)
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Jerry Murdock
> Sent: Tuesday, August 14, 2001 1:42 PM
> To: [EMAIL PROTECTED]
> Subject: Re: REVDNS:RE: [Declude.Virus] Virus Issue
>
>
> Expected since mcafee and solomon share the same engine.
>
> FWIW: Norman does not catch it either.
>
> Kaspersky identifies it as i-worm/magistr.corrupted. I found the
> "corrupted"
> interesting, don't know what it really means though.
>
> Jerry
>
> ----- Original Message -----
> From: "Dan Spangenberg" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, August 14, 2001 1:12 PM
> Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue
>
>
> > Well good ole' declude and Dr. Solomon caught the accstat.exe just fine.
> >
> > "The spool file name is D41443b6.SMD.
> > The virus is named the W95/MTX.gen@M virus !!!
> > The filename was ACCSTAT.EXE"
> >
> > Thanks All
> > Dan
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of Dan Spangenberg
> > > Sent: Tuesday, August 14, 2001 8:53 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue
> > >
> > >
> > > I never did get the file, could someone please send it to me,
> offlist of
> > > course?
> > >
> > > [EMAIL PROTECTED]
> > >
> > > Thanks
> > > Dan
> > >
> > > > -----Original Message-----
> > > > From: [EMAIL PROTECTED]
> > > > [mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens
> > > > Sent: Tuesday, August 14, 2001 7:33 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue
> > > >
> > > >
> > > > ditto here please. [EMAIL PROTECTED]
> > > >
> > > > TIA
> > > >
> > > > Craig.
> > > >
> > > > -----Original Message-----
> > > > From: [EMAIL PROTECTED]
> > > > [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Crawford
> > > > Sent: Monday, August 13, 2001 12:06 PM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: REVDNS:RE: [Declude.Virus] Virus Issue
> > > >
> > > >
> > > > could you send me that file as well? off list
> > > > [EMAIL PROTECTED]
> > > >
> > > > > -----Original Message-----
> > > > > From: [EMAIL PROTECTED]
> > > > > [mailto:[EMAIL PROTECTED]]On Behalf Of Jonathan
> > > > > Sent: Monday, August 13, 2001 10:23 AM
> > > > > To: [EMAIL PROTECTED]
> > > > > Subject: Re: [Declude.Virus] Virus Issue
> > > > >
> > > > >
> > > > > Scan it with housecall.antivirus.com (i sent it to you off-list).
> > > > > Odds of
> > > > > it intentionally being sent are pretty null .. came from a
> > > > random address
> > > > > in china. Housecall did pick it up .. (as magistr?) I
> dont remember ..
> > > > >
> > > > > Jonathan
> > > > >
> > > > > At 10:17 AM 8/13/2001 -0400, you wrote:
> > > > >
> > > > > >>Usenet, for one .. I've seen it a couple other places as well.
> > > > > >
> > > > > >Do you know what the name of the virus is? I just checked
> > > > > McAfee as well,
> > > > > >and couldn't find info on it (although searching of their virus
> > > > > >information database is extremely limited). Any chance the
> > > accstat.exe
> > > > > >was being sent intentionally, but that it happened to be
> > > > > infected by a virus?
> > > > > > -Scott
> > > > > >
> > > > > >This E-mail came from the Declude.Virus mailing list. To
> > > > > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > > > >type "unsubscribe Declude.Virus". You can E-mail
> > > > > >[EMAIL PROTECTED] for assistance. You can visit our web
> > > > > >site at http://www.declude.com .
> > > > >
> > > > > This E-mail came from the Declude.Virus mailing list. To
> > > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > > > type "unsubscribe Declude.Virus". You can E-mail
> > > > > [EMAIL PROTECTED] for assistance. You can visit our web
> > > > > site at http://www.declude.com .
> > > > >
> > > > >
> > > >
> > > > This E-mail came from the Declude.Virus mailing list. To
> > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > > type "unsubscribe Declude.Virus". You can E-mail
> > > > [EMAIL PROTECTED] for assistance. You can visit our web
> > > > site at http://www.declude.com .
> > > >
> > > > This E-mail came from the Declude.Virus mailing list. To
> > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > > type "unsubscribe Declude.Virus". You can E-mail
> > > > [EMAIL PROTECTED] for assistance. You can visit our web
> > > > site at http://www.declude.com .
> > > >
> > >
> > > This E-mail came from the Declude.Virus mailing list. To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.Virus". You can E-mail
> > > [EMAIL PROTECTED] for assistance. You can visit our web
> > > site at http://www.declude.com .
> > >
> >
> > This E-mail came from the Declude.Virus mailing list. To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus". You can E-mail
> > [EMAIL PROTECTED] for assistance. You can visit our web
> > site at http://www.declude.com .
>
>
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". You can E-mail
> [EMAIL PROTECTED] for assistance. You can visit our web
> site at http://www.declude.com .
>
>
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
