We're seeing it too.
McAfee on desktop catching as a "trojan". AVG and F-Prot not
catching it yet.
Declude not stopping, either.
newprice.zip is the attachment name.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Monday, August 09, 2004 11:23 AM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] JS/illWill
I've seen several
JS/IllWill messages in the past 20 minutes on our system
Looking at http://vil.nai.com/vil/content/v_99242.htm it's
an old virus (2001) and I can't remember another one in the
past.
But now I can see
them comming from all different IP-Adresses.
Mailfrom looks like
real existing adresses but are definitively forged.
Markus
