Re: [Declude.Virus] How to check VIRUSCODEs

2005-04-21 Thread Matt
MTLDB database vis-a-vis correlating IPs that send viruses to IPs that send spam?   Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Wednesday, April 20, 2005 8:35 PM To: Declud

RE: [Declude.Virus] How to check VIRUSCODEs

2005-04-21 Thread Colbeck, Andrew
Title: Message Thanks for the insight, Matt.   We are used to seeing virus authors doing their seeding from the home-user cable, DSL and even dial-up pools, but these samples were definitely spammer web and email server blocks, and not XBL listings and not collateral damage SBL listings.  

RE: [Declude.Virus] How to check VIRUSCODEs

2005-04-21 Thread John Tolmachoff \(Lists\)
PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] How to check VIRUSCODEs   What you have means that a matching virus code was found for each scanner.  If a scanner throws a code besides one that you specify, it will be logged in much the same way that the virus is shown.  The followi

Re: [Declude.Virus] How to check VIRUSCODEs

2005-04-21 Thread Matt
at send spam?   Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Wednesday, April 20, 2005 8:35 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] How to check VIRUSCODEs What you have means th

RE: [Declude.Virus] How to check VIRUSCODEs

2005-04-21 Thread Colbeck, Andrew
Title: Message http://www.f-prot.com/support/contact_support.html   Andrew 8) -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, April 21, 2005 9:22 AMTo: Declude.Virus@declude.comSubject: Re: [Declude.Virus] How to che

Re: [Declude.Virus] How to check VIRUSCODEs

2005-04-21 Thread Matt
heir MTLDB database vis-a-vis correlating IPs that send viruses to IPs that send spam?   Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Wednesday, April 20, 2005 8:35 PM To: Declude.Virus@declude.com Subject

Re: [Declude.Virus] How to check VIRUSCODEs

2005-04-21 Thread Matt
To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] How to check VIRUSCODEs   What you have means that a matching virus code was found for each scanner.  If a scanner throws a code besides one that you specify, it will be logged in much the same way that the virus is shown.  The foll

RE: [Declude.Virus] How to check VIRUSCODEs

2005-04-21 Thread Colbeck, Andrew
Title: Message The return code = 8 in F-Prot does mean "suspicious file" and not "virus".  In this case, they are not calling the executable Bagle, they are calling it Mitglieder, which is a Bagle-related file and is commonly seen as a dropper.   I sent a support request asking them reconsi

RE: [Declude.Virus] How to check VIRUSCODEs

2005-04-20 Thread John Tolmachoff \(Lists\)
PROTECTED] On Behalf Of Matt Sent: Wednesday, April 20, 2005 8:35 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] How to check VIRUSCODEs   What you have means that a matching virus code was found for each scanner.  If a scanner throws a code besides one that you specify, it will be

RE: [Declude.Virus] How to check VIRUSCODEs

2005-04-20 Thread Goran Jovanovic
PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] How to check VIRUSCODEs   What you have means that a matching virus code was found for each scanner.  If a scanner throws a code besides one that you specify, it will be logged in much the same way that the virus is shown.  The

Re: [Declude.Virus] How to check VIRUSCODEs

2005-04-20 Thread Matt
What you have means that a matching virus code was found for each scanner.  If a scanner throws a code besides one that you specify, it will be logged in much the same way that the virus is shown.  The following is exactly what F-Prot will show when it throws a code of 8 and when you aren't con