The viirus is called: W32/[EMAIL PROTECTED] virus [I think..] F-prot is missing it by mcafee is getting it.
Here are some of the filenames: filename="document.zip" filename="body.zip" filename="message.zip" filename="body.scr" filename="message.scr" filename="file.zip" filename="data.scr" filename="text.pif" filename="doc.scr" filename="text.scr" -Nick Hayer Date sent: Mon, 26 Jan 2004 16:34:29 -0500 To: [EMAIL PROTECTED] From: "R. Scott Perry" <[EMAIL PROTECTED]> Subject: [IMail Forum] New, fast-spreading virus Organization: Computerized Horizons Send reply to: [EMAIL PROTECTED] > FYI, there is a new fast-spreading virus out there, that is too new to > be caught by AV programs yet. > > So far we have seen filenames of "body", "data", "document", "file", > "glszfj", "message", "readme", "test", "text", "vgsu042a", and > "vncexdl", with extensions of .pif, .scr, .zip. > > It may be a wise idea to temporarily ban .pif and .scr files (and > possibly .zip as well), if you do not already. If you are using > Declude Virus, you can use "BANEXT PIF" and "BANEXT SCR" in the > virus.cfg file to do this. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers. Declude Virus: Catches known viruses and is the leader in > mailserver vulnerability detection. Find out what you've been missing: > Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge > Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
