Don't think it's the same critter.
They do have a nimda listing in the database now, with a "discovered" time of
less than 2 hrs ago. It says pattern file 940 is required for detection.
Current pattern file is 939, and I KNOW from a sample I personally received
and tested that 939 does not detect it.
I did not see 940 available on their site, as of 5 minutes ago.
Jerry
----- Original Message -----
From: "Sheldon Koehler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, September 18, 2001 2:23 PM
Subject: Re: [imail] OT: Alert: New IIS Worm
> > Norton, Kaspersky and Trend aresilent on the subject.
>
> Trend has this: TROJ_APOST.A
> http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_APOST.A
>
> And it was on their site first thing this morning when I checked.
>
>
> Sheldon
>
>
> Sheldon Koehler, Owner/Partner http://www.tenforward.com
> Ten Forward Communications E-Commerce that makes sense!
> 360-457-9023 http://store.tenforward.com
>
> "Whenever you find yourself on the side of the majority, it's time
> to pause and reflect." Mark Twain
>
>
>
>
>
> ______________________________________________________________________
> The HKSI-IMail Admin List is hosted by........ Humankind Systems, Inc.
> Questions, Comments or Complain like Hell.. mailto:[EMAIL PROTECTED]
> Message Archive... http://www.tallylist.com/archives/index.cfm/mlist.4
> To Manage your Subscription......... http://humankindsystems.com/lists
______________________________________________________________________
The HKSI-IMail Admin List is hosted by........ Humankind Systems, Inc.
Questions, Comments or Complain like Hell.. mailto:[EMAIL PROTECTED]
Message Archive... http://www.tallylist.com/archives/index.cfm/mlist.4
To Manage your Subscription......... http://humankindsystems.com/lists
