Interesting, out of their list, only ClamWin caught it. I assume that is ClamAV?
John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Fritz Squib > Sent: Thursday, November 11, 2004 9:17 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] Bagz > > John, > Try submitting it to http://www.virustotal.com and see what they return. > > Fritz > > Frederick P. Squib, Jr. > Network Operations/Mail Administrator > Citizens Telephone Company of Kecksburg > http://www.wpa.net > > () ascii ribbon campaign - against html mail > /\ - against microsoft attachments > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff > (Lists) > Sent: Thursday, November 11, 2004 11:28 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] Bagz > > > I received a reply from AVG this morning saying the file I submitted to them > was virus free, even though Scott confirmed it was infected with Bagz. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > -----Original Message----- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > > On Behalf Of John Tolmachoff (Lists) > > Sent: Thursday, November 11, 2004 12:27 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.Virus] Bagz > > > > Marcus, do not take the personally because I am tired and grouchy. > > > > That information does me no good. I already know that everyone else is > > catching these as some form of Bagz. However, no one lists any alias > > or variant name that AVG or F-Prot might be using, and neither F-Prot > > or AVG list Bagz as a known virus. > > > > I am using F-Prot and AVG with Declude Virus, and these are only being > > caught with banned extension, not an infected message as they should > > be. > > > > I have submitted to both F-Prot and AVG and am waiting back for their > > wonderful words of wisdom. > > > > And yes, my defs are updated. Programs also. > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] > > > On Behalf Of Markus Gufler > > > Sent: Thursday, November 11, 2004 12:07 AM > > > To: [EMAIL PROTECTED] > > > Subject: RE: [Declude.Virus] Bagz > > > > > > > > > > Neither F-Prot (3.15b) nor AVG (7.0.289) appear to be catching > > > > this. > > > > > > Hm searching on http://vil.nai.com/vil/default.asp for "bagz" > > > returns a > > lot > > > of variants. Seems not to be an absolutely new one... > > > > > > Markus > > > > > > > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, just > send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned by Citizens Internet Services with Declude Virus.] > > > --- > [This E-mail scanned by Citizens Internet Services with Declude Virus.] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
