RE: REVDNS:RE: [Declude.Virus] Virus Issue
ditto here please. [EMAIL PROTECTED] TIA Craig. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Crawford Sent: Monday, August 13, 2001 12:06 PM To: [EMAIL PROTECTED] Subject: REVDNS:RE: [Declude.Virus] Virus Issue could you send me that file as well? off list [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jonathan Sent: Monday, August 13, 2001 10:23 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Virus Issue Scan it with housecall.antivirus.com (i sent it to you off-list). Odds of it intentionally being sent are pretty null .. came from a random address in china. Housecall did pick it up .. (as magistr?) I dont remember .. Jonathan At 10:17 AM 8/13/2001 -0400, you wrote: Usenet, for one .. I've seen it a couple other places as well. Do you know what the name of the virus is? I just checked McAfee as well, and couldn't find info on it (although searching of their virus information database is extremely limited). Any chance the accstat.exe was being sent intentionally, but that it happened to be infected by a virus? -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: REVDNS:RE: [Declude.Virus] Virus Issue
I never did get the file, could someone please send it to me, offlist of course? [EMAIL PROTECTED] Thanks Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens Sent: Tuesday, August 14, 2001 7:33 AM To: [EMAIL PROTECTED] Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue ditto here please. [EMAIL PROTECTED] TIA Craig. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Crawford Sent: Monday, August 13, 2001 12:06 PM To: [EMAIL PROTECTED] Subject: REVDNS:RE: [Declude.Virus] Virus Issue could you send me that file as well? off list [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jonathan Sent: Monday, August 13, 2001 10:23 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Virus Issue Scan it with housecall.antivirus.com (i sent it to you off-list). Odds of it intentionally being sent are pretty null .. came from a random address in china. Housecall did pick it up .. (as magistr?) I dont remember .. Jonathan At 10:17 AM 8/13/2001 -0400, you wrote: Usenet, for one .. I've seen it a couple other places as well. Do you know what the name of the virus is? I just checked McAfee as well, and couldn't find info on it (although searching of their virus information database is extremely limited). Any chance the accstat.exe was being sent intentionally, but that it happened to be infected by a virus? -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: REVDNS:RE: [Declude.Virus] Virus Issue
I think it's just a link to Trend's browser based scanner. http://housecall.antivirus.com Jerry - Original Message - From: Dan Spangenberg [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 14, 2001 10:53 AM Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue I never did get the file, could someone please send it to me, offlist of course? [EMAIL PROTECTED] Thanks Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens Sent: Tuesday, August 14, 2001 7:33 AM To: [EMAIL PROTECTED] Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue ditto here please. [EMAIL PROTECTED] TIA Craig. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Crawford Sent: Monday, August 13, 2001 12:06 PM To: [EMAIL PROTECTED] Subject: REVDNS:RE: [Declude.Virus] Virus Issue could you send me that file as well? off list [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jonathan Sent: Monday, August 13, 2001 10:23 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Virus Issue Scan it with housecall.antivirus.com (i sent it to you off-list). Odds of it intentionally being sent are pretty null .. came from a random address in china. Housecall did pick it up .. (as magistr?) I dont remember .. Jonathan At 10:17 AM 8/13/2001 -0400, you wrote: Usenet, for one .. I've seen it a couple other places as well. Do you know what the name of the virus is? I just checked McAfee as well, and couldn't find info on it (although searching of their virus information database is extremely limited). Any chance the accstat.exe was being sent intentionally, but that it happened to be infected by a virus? -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: REVDNS:RE: [Declude.Virus] Virus Issue
Well good ole' declude and Dr. Solomon caught the accstat.exe just fine. The spool file name is D41443b6.SMD. The virus is named the W95/MTX.gen@M virus !!! The filename was ACCSTAT.EXE Thanks All Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dan Spangenberg Sent: Tuesday, August 14, 2001 8:53 AM To: [EMAIL PROTECTED] Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue I never did get the file, could someone please send it to me, offlist of course? [EMAIL PROTECTED] Thanks Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens Sent: Tuesday, August 14, 2001 7:33 AM To: [EMAIL PROTECTED] Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue ditto here please. [EMAIL PROTECTED] TIA Craig. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Crawford Sent: Monday, August 13, 2001 12:06 PM To: [EMAIL PROTECTED] Subject: REVDNS:RE: [Declude.Virus] Virus Issue could you send me that file as well? off list [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jonathan Sent: Monday, August 13, 2001 10:23 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Virus Issue Scan it with housecall.antivirus.com (i sent it to you off-list). Odds of it intentionally being sent are pretty null .. came from a random address in china. Housecall did pick it up .. (as magistr?) I dont remember .. Jonathan At 10:17 AM 8/13/2001 -0400, you wrote: Usenet, for one .. I've seen it a couple other places as well. Do you know what the name of the virus is? I just checked McAfee as well, and couldn't find info on it (although searching of their virus information database is extremely limited). Any chance the accstat.exe was being sent intentionally, but that it happened to be infected by a virus? -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: REVDNS:RE: [Declude.Virus] Virus Issue
Expected since mcafee and solomon share the same engine. FWIW: Norman does not catch it either. Kaspersky identifies it as i-worm/magistr.corrupted. I found the corrupted interesting, don't know what it really means though. Jerry - Original Message - From: Dan Spangenberg [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 14, 2001 1:12 PM Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue Well good ole' declude and Dr. Solomon caught the accstat.exe just fine. The spool file name is D41443b6.SMD. The virus is named the W95/MTX.gen@M virus !!! The filename was ACCSTAT.EXE Thanks All Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dan Spangenberg Sent: Tuesday, August 14, 2001 8:53 AM To: [EMAIL PROTECTED] Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue I never did get the file, could someone please send it to me, offlist of course? [EMAIL PROTECTED] Thanks Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens Sent: Tuesday, August 14, 2001 7:33 AM To: [EMAIL PROTECTED] Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue ditto here please. [EMAIL PROTECTED] TIA Craig. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Crawford Sent: Monday, August 13, 2001 12:06 PM To: [EMAIL PROTECTED] Subject: REVDNS:RE: [Declude.Virus] Virus Issue could you send me that file as well? off list [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jonathan Sent: Monday, August 13, 2001 10:23 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Virus Issue Scan it with housecall.antivirus.com (i sent it to you off-list). Odds of it intentionally being sent are pretty null .. came from a random address in china. Housecall did pick it up .. (as magistr?) I dont remember .. Jonathan At 10:17 AM 8/13/2001 -0400, you wrote: Usenet, for one .. I've seen it a couple other places as well. Do you know what the name of the virus is? I just checked McAfee as well, and couldn't find info on it (although searching of their virus information database is extremely limited). Any chance the accstat.exe was being sent intentionally, but that it happened to be infected by a virus? -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: REVDNS:RE: [Declude.Virus] Virus Issue
F-prot support - I reported that they weren't stopping this one, and within 2 hours wanted a copy! I sent it to them - I'll keep you posted... they are in good company still though - symantec doesn't catch it either. Hopefully it is a corrupted non voltile strain??? Don't want my 20 bucks for 20 users to go to waste :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jerry Murdock Sent: Tuesday, August 14, 2001 1:42 PM To: [EMAIL PROTECTED] Subject: Re: REVDNS:RE: [Declude.Virus] Virus Issue Expected since mcafee and solomon share the same engine. FWIW: Norman does not catch it either. Kaspersky identifies it as i-worm/magistr.corrupted. I found the corrupted interesting, don't know what it really means though. Jerry - Original Message - From: Dan Spangenberg [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 14, 2001 1:12 PM Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue Well good ole' declude and Dr. Solomon caught the accstat.exe just fine. The spool file name is D41443b6.SMD. The virus is named the W95/MTX.gen@M virus !!! The filename was ACCSTAT.EXE Thanks All Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dan Spangenberg Sent: Tuesday, August 14, 2001 8:53 AM To: [EMAIL PROTECTED] Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue I never did get the file, could someone please send it to me, offlist of course? [EMAIL PROTECTED] Thanks Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens Sent: Tuesday, August 14, 2001 7:33 AM To: [EMAIL PROTECTED] Subject: RE: REVDNS:RE: [Declude.Virus] Virus Issue ditto here please. [EMAIL PROTECTED] TIA Craig. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Crawford Sent: Monday, August 13, 2001 12:06 PM To: [EMAIL PROTECTED] Subject: REVDNS:RE: [Declude.Virus] Virus Issue could you send me that file as well? off list [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jonathan Sent: Monday, August 13, 2001 10:23 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Virus Issue Scan it with housecall.antivirus.com (i sent it to you off-list). Odds of it intentionally being sent are pretty null .. came from a random address in china. Housecall did pick it up .. (as magistr?) I dont remember .. Jonathan At 10:17 AM 8/13/2001 -0400, you wrote: Usenet, for one .. I've seen it a couple other places as well. Do you know what the name of the virus is? I just checked McAfee as well, and couldn't find info on it (although searching of their virus information database is extremely limited). Any chance the accstat.exe was being sent intentionally, but that it happened to be infected by a virus? -Scott This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . This E-mail came from the Declude.Virus mailing list. To unsubscribe
