Looks like F-Prot is now catching it as SoberZ John T eServices For You
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Rick Davidson > Sent: Monday, November 21, 2005 12:12 PM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] New Virus Strain Pounding my systems > > It is coming in with alot of different zip file names and body names now, I > blocked all zip files and submitted samples > > I am really getting hit hard > > Rick Davidson > National Systems Manager > North American Title Group > 440-639-0607 - Office > 951-233-6342 - Mobile > [EMAIL PROTECTED] > - > ----- Original Message ----- > From: "Matt" <[EMAIL PROTECTED]> > To: <Declude.Virus@declude.com> > Sent: Monday, November 21, 2005 2:51 PM > Subject: Re: [Declude.Virus] New Virus Strain Pounding my systems > > > > McAfee is detecting this currently as W32/[EMAIL PROTECTED] F-Prot is still > > missing it. My first hit was at 2:08 p.m. EST, just 40 minutes ago and > > McAfee seems to have had this one tagged prior to the outbreak starting > > since none have slipped through yet. > > > > Matt > > > > > > > > Rick Davidson wrote: > > > >> heads up folks, I am stopping a new zip virus with the following junkmail > >> rules, this is all I have seen so far. Contains an exacutable payload > >> called File-packed_dataInfo.exe > >> > >> Rick Davidson > >> National Systems Manager > >> North American Title Group > >> 440-639-0607 - Office > >> 951-233-6342 - Mobile > >> [EMAIL PROTECTED] > >> - > >> --- > >> This E-mail came from the Declude.Virus mailing list. To > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >> type "unsubscribe Declude.Virus". The archives can be found > >> at http://www.mail-archive.com. > >> > >> > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
