nal Message-
> From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
> On Behalf Of Mark Reimer
> Sent: Tuesday, November 15, 2005 12:49 PM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] New Sober to be released, possible variation?
>
> If we are banning extens
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John T (Lists)
Sent: Tuesday, November 15, 2005 2:30 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] New Sober to be released, possible
variation?
And another:
BANNAME packed-password_text.zip
John T
eServices For
: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] New Sober to be released, possible
variation?
And another:
BANNAME packed-password_text.zip
John T
eServices For You
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
> On Behalf Of Darin Cox
> S
new variants that use the names are caught
> before definitions are available.
>
> Darin.
>
>
> - Original Message -
> From: "Colbeck, Andrew" <[EMAIL PROTECTED]>
> To:
> Sent: Tuesday, November 15, 2005 11:57 AM
> Subject: RE: [Declude.Virus]
ECTED] On Behalf Of Darin Cox
> Sent: Tuesday, November 15, 2005 10:16 AM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] New Sober to be released,
> possible variation?
>
> Another one to block...
>
> BANNAME Accept_e-Text.zip
>
> The list so far is
>
t; <[EMAIL PROTECTED]>
To:
Sent: Tuesday, November 15, 2005 11:57 AM
Subject: RE: [Declude.Virus] New Sober to be released, possible variation?
There are very interesting details in Trend Micro's writeup.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FS
OBER%2EAD&
om: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
> Sent: Tuesday, November 15, 2005 6:05 AM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] New Sober to be released,
> possible variation?
>
> Most the new Sober variants are expected to be
files have caught up. We keep the bans in place for the
usual overlap in new variants.
Darin.
- Original Message -
From: "Markus Gufler" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, November 15, 2005 8:44 AM
Subject: RE: [Declude.Virus] New Sober to be released, possible v
Thanks, Uwe. I'm sure there will be more.
Darin.
- Original Message -
From: "Info Wind" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, November 15, 2005 8:52 AM
Subject: Re: [Declude.Virus] New Sober to be released, possible variation?
We get one with foto.zip and wo
We get one with foto.zip and word-text.zip
Uwe
P.S.: Thank you, Darin for the list.
- Original Message -
From: "Darin Cox" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, November 15, 2005 2:33 PM
Subject: Re: [Declude.Virus] New Sober to be released, possible variation
iste.zip
> BANNAME reg_text.zip
> BANNAME registration.zip
> BANNAME tabelle.zip
>
>
> Darin.
>
>
> - Original Message -
> From: "Doug Anderson" <[EMAIL PROTECTED]>
> To:
> Sent: Tuesday, November 15, 2005 8:24 AM
> Subject: Re: [D
Darin.
- Original Message -
From: "Doug Anderson" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, November 15, 2005 8:24 AM
Subject: Re: [Declude.Virus] New Sober to be released, possible variation?
Looks like varying attachment names. I got one thats excel_table.zip
- Original Messag
Looks like varying attachment names. I got one thats excel_table.zip
- Original Message -
From: "David Dodell" <[EMAIL PROTECTED]>
To: "John T (Lists)"
Sent: Tuesday, November 15, 2005 6:50 AM
Subject: Re: [Declude.Virus] New Sober to be released, pos
Monday, November 14, 2005, 10:50:00 PM, John T (Lists) wrote:
> Sophos is now calling it Sober-R.
Possible variation received this morning ... the text discussed
receiving a problem email, and the attachment was email_photo.zip
---
This E-mail came from the Declude.Virus mailing list. To
unsubs
14 matches
Mail list logo
