Yup this is the one I got as well. I just did a manual update of F-Prot and it found a new SIGN.DEF and SIGN2.DEF
Maybe these signatures will find it now. Goran Jovanovic Omega Network Solutions > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of John T (Lists) > Sent: Thursday, December 15, 2005 10:46 AM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] Where to send exe's to check if they are a > virus? > > www.virustotal.com > > This is a very small e-mail, the D file being only 11 kb. > > Some of the small AV companies are reporting it as a Bagle variant and > F-Prot is reporting it as MitGlieder.GU although it is not catching it on > the server. > > John T > eServices For You > > > -----Original Message----- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > > On Behalf Of Goran Jovanovic > > Sent: Thursday, December 15, 2005 7:26 AM > > To: Declude.Virus@declude.com > > Subject: [Declude.Virus] Where to send exe's to check if they are a > virus? > > > > Hi, > > > > I am getting a bunch of exe in zip files being banned right now. I have > > grabbed one of them it is called marie.zip and has a single exe in it > > called s3700020.exe and when you put it on your desktop is has the > > standard jpeg icon associated with it. > > > > My F-Prot, McAfee and Symantec scanners are not finding a virus. Where > > is the place that you can send it to and have it checked out by a ton of > > virus scanners? > > > > Thanx > > > > Goran Jovanovic > > Omega Network Solutions > > --- > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
