Title: Message
The
return code = 8 in F-Prot does mean "suspicious file" and not "virus". In
this case, they are not calling the executable Bagle, they are calling it
Mitglieder, which is a Bagle-related file andis commonly seen as a
dropper.
I sent
a support request asking them
To:
Declude.Virus@declude.com
Subject: Re:
[Declude.Virus] How
to check VIRUSCODEs
What you have means that a matching virus
code was found for each
scanner. If a scanner throws a code besides one that you specify, it
will
be logged in much the same way that the virus is shown. The following
lating IPs that send
viruses to IPs that send spam?
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How to check VIRUS
Title: Message
http://www.f-prot.com/support/contact_support.html
Andrew
8)
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of MattSent: Thursday, April 21, 2005 9:22
AMTo: Declude.Virus@declude.comSubject: Re:
[Declude.Virus] How to
L PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How to check VIRUSCODEs
What you have means that a matching virus code was found for each
scanner. If a scanner throw
: [Declude.Virus] How
to check VIRUSCODEs
John,
If you don't mind sharing, what was the issue that you had last week with
F-Prot throwing a code 8 on legitimate E-mail? Or did I get that wrong?
Thanks,
Matt
John Tolmachoff (Lists) wrote:
From my understanding is that code 8
means the file is suspect
Title: Message
Thanks
for the insight, Matt.
We are
used to seeing virus authors doing their seeding from the home-user cable, DSL
and even dial-up pools, but these samples were definitely spammer web and email
server blocks, and not XBL listings and not collateral damage SBL
listings.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How to check VIRUSCODEs
This was originally a thread from the Junkmail list but I am moving it
over to the virus list.
Check your virus log and you may see some code 8
errors in it. Adding viruscode 8 will at least stop them.
How do you see if there are any code 8s in the virus log file. I use
F-Prot and
What you have means that a matching virus code was found for each
scanner. If a scanner throws a code besides one that you specify, it
will be logged in much the same way that the virus is shown. The
following is exactly what F-Prot will show when it throws a code of 8
and when you aren't
PROTECTED] On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How
to check VIRUSCODEs
What you have means that a matching virus code was found for each
scanner. If a scanner throws a code besides one that you specify
11 matches
Mail list logo
