Great.. Thanks for the info..
It's also good to see F-Prot being late to catch this as
well.. ho-hum..
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
Sent: Tuesday, August 31, 2004 7:22 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Foto.zip
It's a virus - a new bagle variant. I am
seeing it detected by Mcafee as JS/IllWill trojan. I have seen a
signifigant increase in this virus today compared to yesterday. It was the
second most detected virus on one of our servers today.
Here is the mcafee link - http://vil.nai.com/vil/content/v_99242.htm
Virus Scanner Summary Report
(MCAFEE)
Total Messages Processed: 34,936
Virus Infected Messages: 2,112
Percentage Infected: 6.05%
Virus Infected Messages: 2,112
Percentage Infected: 6.05%
VIRUS
# INFECTED PERCENTAGE
W32/[EMAIL PROTECTED]
JS/ILLWILL TROJAN !!!................405........1.16%
W32/[EMAIL PROTECTED]
JS/ILLWILL TROJAN !!!................405........1.16%
Darrell
----------------------------------------------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And Imail.
IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers.
Check out http://www.invariantsystems.com for utilities for Declude And Imail.
IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers.
----- Original Message -----
From: "Jeff Maze" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, August 31, 2004 7:04 PM
Subject: [Declude.Virus]
Foto.zip
>
> Subject: foto
> Message: foto
>
> Attachment: foto.zip (5kb)
>
> Any ideas?
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
>
