Title: Message
The
return code = 8 in F-Prot does mean "suspicious file" and not "virus". In
this case, they are not calling the executable Bagle, they are calling it
Mitglieder, which is a Bagle-related file andis commonly seen as a
dropper.
I sent
a support request asking them
To:
Declude.Virus@declude.com
Subject: Re:
[Declude.Virus] How
to check VIRUSCODEs
What you have means that a matching virus
code was found for each
scanner. If a scanner throws a code besides one that you specify, it
will
be logged in much the same way that the virus is shown. The following
lating IPs that send
viruses to IPs that send spam?
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How to check VIRUS
Title: Message
http://www.f-prot.com/support/contact_support.html
Andrew
8)
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of MattSent: Thursday, April 21, 2005 9:22
AMTo: Declude.Virus@declude.comSubject: Re:
[Declude.Virus] How to
L PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How to check VIRUSCODEs
What you have means that a matching virus code was found for each
scanner. If a scanner throw
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How
to check VIRUSCODEs
What you have means that a matching virus code was found for each
scanner. If a scanner throws a code besides one that you specify, it will
be logged in much the same way that the virus is shown. The following is
exactly
Title: Message
Thanks
for the insight, Matt.
We are
used to seeing virus authors doing their seeding from the home-user cable, DSL
and even dial-up pools, but these samples were definitely spammer web and email
server blocks, and not XBL listings and not collateral damage SBL
listings.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How to check VIRUSCODEs
What you have means that a matching virus code was found for each
scanner. If a scanner throws a code besides one that you specify, it
will be logged in much the same way that the virus is shown. The
following is exactly what F-Prot will show when it throws a code of 8
and when you aren't
PROTECTED] On Behalf Of Matt
Sent: Wednesday, April 20, 2005 8:35 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] How
to check VIRUSCODEs
What you have means that a matching virus code was found for each
scanner. If a scanner throws a code besides one that you specify
10 matches
Mail list logo
