Try submitting it to http://www.virustotal.com
Fritz Frederick P. Squib, Jr. Network Operations/Mail Administrator Citizens Telephone Company of Kecksburg http://www.wpa.net () ascii ribbon campaign - against html email /\ - against microsoft attachments -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Trendel Sent: Thursday, January 20, 2005 12:29 PM To: [email protected] Subject: RE: [IMail Forum] New virus?? Save the sales pitch. Been there, done them, but that's not what I asked. I'm just checking on a possible undiscovered virus/variant. I have submitted the email to Clam and McAfee with no luck yet of identifying it. MikeT. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Thursday, January 20, 2005 11:31 AM To: [email protected] Subject: RE: [IMail Forum] New virus?? Ah, but see there are full featured AV 3rd party solutions for Imail that would have stopped this by banning password protected zip files. That is Declude Virus. John Tolmachoff Engineer/Consultant/Owner eServices For You -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Trendel Sent: Thursday, January 20, 2005 8:14 AM To: IMail_Forum Subject: [IMail Forum] New virus?? Looks like I'm seeing a new variant of the beagle virus getting passed my AV scanner. I just updated to Symantec's Beta def's. I don't see any thing on their site yet. The email contained a password protected Zip file "Spykiller.exe" Anyone detecting this one or know for sure which virus it is? MikeT. Sample info******************************** slightly modified. From: Support To: mailto:[EMAIL PROTECTED] Sent: Wednesday, January 19, 2005 1:37 AM Subject: Important notice for user [EMAIL PROTECTED] Dear user of dnet.net Your account has been used to send a large amount of spam messages during the recent week. Most likely your computer had been infected by a recent virus and now runs a trojaned proxy server. We recommend that you run in attach free spyware remover software to keep your computer safe. Password to archive : 7831 License key : 0548-6185-2 Best regards, The dnet.net team --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
