Is this what you are seeing? http://www.sophos.com/virusinfo/analyses/w32feebsa.html
John T eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of JT > Sent: Thursday, January 05, 2006 6:44 AM > To: declude.virus@declude.com > Subject: [Declude.Virus] Sober.X Variant > > Has anyone seen an influx of this virus come through? I've upgraded to > the latest F-Prot and it seems like it still sneaking through. Although > the Z variant is being stopped by F-prot. Any light that could be shed > on this would be greatly appreciated. > > Also I've tried setting up ClamAV for Windows on our imail server as a > scanner. I've got it to scan but it randomly generated an exit code of > 50. Does anyone know what exit code 50 from ClamAV means? > > Thanks, > JT > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.