RE: [Declude.Virus] JS/illWill

[John Tolmachoff \(Lists\)]

Interesting in that the virus listed spreads by visiting a website.   What is it you are catching?   In the last hour or so I have been getting a lot of banned zip-exe files where the D file is only about 10kb. I sent one to virustrap for diagnosis.   John Tolmachoff Engineer/Consultant/Owner eServices For You   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Monday, August 09, 2004 9:48 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] JS/illWill   Yep, I've seen a bunch of them this morning, as well.  Here, only McAfee and BitDefender are currently catching it.  I have reported the virus to ClamAV, F-Prot, and TrendMicro.   Bill ----- Original Message ----- From: Markus Gufler To: [EMAIL PROTECTED] Sent: Monday, August 09, 2004 9:22 AM Subject: [Declude.Virus] JS/illWill   I've seen several JS/IllWill messages in the past 20 minutes on our system   Looking at http://vil.nai.com/vil/content/v_99242.htm it's an old virus (2001) and I can't remember another one in the past. But now I can see them comming from all different IP-Adresses.   Mailfrom looks like real existing adresses but are definitively forged.   Markus