MTLDB database vis-a-vis correlating IPs that send
viruses to IPs that send spam?
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declud
Title: Message
Thanks
for the insight, Matt.
We are
used to seeing virus authors doing their seeding from the home-user cable, DSL
and even dial-up pools, but these samples were definitely spammer web and email
server blocks, and not XBL listings and not collateral damage SBL
listings.
PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How
to check VIRUSCODEs
What you have means that a matching virus code was found for each
scanner. If a scanner throws a code besides one that you specify, it will
be logged in much the same way that the virus is shown. The followi
at send spam?
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How to check VIRUSCODEs
What you have means th
Title: Message
http://www.f-prot.com/support/contact_support.html
Andrew
8)
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of MattSent: Thursday, April 21, 2005 9:22
AMTo: Declude.Virus@declude.comSubject: Re:
[Declude.Virus] How to che
heir MTLDB database vis-a-vis correlating IPs that send
viruses to IPs that send spam?
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject
To:
Declude.Virus@declude.com
Subject: Re:
[Declude.Virus] How
to check VIRUSCODEs
What you have means that a matching virus
code was found for each
scanner. If a scanner throws a code besides one that you specify, it
will
be logged in much the same way that the virus is shown. The foll
Title: Message
The
return code = 8 in F-Prot does mean "suspicious file" and not "virus". In
this case, they are not calling the executable Bagle, they are calling it
Mitglieder, which is a Bagle-related file and is commonly seen as a
dropper.
I sent
a support request asking them reconsi
PROTECTED] On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How
to check VIRUSCODEs
What you have means that a matching virus code was found for each
scanner. If a scanner throws a code besides one that you specify, it will
be
PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How
to check VIRUSCODEs
What you have means that a matching virus code was found for each
scanner. If a scanner throws a code besides one that you specify, it will
be logged in much the same way that the virus is shown. The
What you have means that a matching virus code was found for each
scanner. If a scanner throws a code besides one that you specify, it
will be logged in much the same way that the virus is shown. The
following is exactly what F-Prot will show when it throws a code of 8
and when you aren't con
11 matches
Mail list logo