RE: [Declude.Virus] New Variant of Bagle?

2005-09-20 Thread Panda Consulting S.A. Luis Alberto Arango
f-prot.com/virusinfo/submission_form.html regards Luis Arango > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Mario Antonio > Sent: Lunes, 19 de Septiembre de 2005 03:04 p.m. > To: Declude.Virus@declude.com > Subject: Re: [Declude

Re: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Mario Antonio
3 PM Subject: RE: [Declude.Virus] New Variant of Bagle? > I have latest definition signatures and still f-prot doesn't catch the > virus. > > I banned the files while f-prot comes with a definition file that catches > it. > > I already submitted the file to f-prot for analisys. &

RE: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Colbeck, Andrew
rango > Sent: Monday, September 19, 2005 12:44 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] New Variant of Bagle? > > I have latest definition signatures and still f-prot doesn't > catch the virus. > > I banned the files while f-prot comes with a d

RE: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Panda Consulting S.A. Luis Alberto Arango
nsulting S.A. Luis Alberto Arango > Sent: Lunes, 19 de Septiembre de 2005 02:44 p.m. > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] New Variant of Bagle? > > I have latest definition signatures and still f-prot doesn't > catch the virus. > > I banned the f

RE: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Panda Consulting S.A. Luis Alberto Arango
I have latest definition signatures and still f-prot doesn't catch the virus. I banned the files while f-prot comes with a definition file that catches it. I already submitted the file to f-prot for analisys. Zone Alarm antivirus doesn't detect any virus in the file either. The zip contains a f

RE: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Colbeck, Andrew
teiner > Sent: Monday, September 19, 2005 8:51 AM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Virus] New Variant of Bagle? > > I just checked my F-Prot, and it has a date of 9/19/2005 for > both "Application/Script viruses and Trojans" and > "Document/O

RE: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Markus Gufler
I can see a lot of returning NDR's from our virus warnings (unknown virus) in the last 3 hours now (03:00PM - 06:00PM GMT+1) As I can see F-Prot is detecting some suspicious file but does not have an exact definition or name for this virus. I have temporaly disabled virus warnings. Markus > ---

Re: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Gary Steiner
ays submit virus samples to them at http://www.f-prot.com/virusinfo/submission_form.html Original Message > From: "Mario Antonio" <[EMAIL PROTECTED]> > Sent: Monday, September 19, 2005 10:30 AM > To: Declude.Virus@declude.com > Subject: Re: [Declude.Vi

Re: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Mario Antonio
Thanks for sharing your settings. Regards Mario Antonio - Original Message - From: "Darin Cox" <[EMAIL PROTECTED]> To: Sent: Monday, September 19, 2005 10:39 AM Subject: Re: [Declude.Virus] New Variant of Bagle? > These have been sufficient for us in the pas

Re: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Darin Cox
. - Original Message - From: "Mario Antonio" <[EMAIL PROTECTED]> To: Sent: Monday, September 19, 2005 10:28 AM Subject: Re: [Declude.Virus] New Variant of Bagle? Darin, Thanks, I am running the latest def of F-prot, and banning those filenames. I will ban zip extensions i

Re: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Mario Antonio
Darin, Thanks, I am running the latest def of F-prot, and banning those filenames. I will ban zip extensions if the thing gets nasty. Mario Antonio - Original Message - From: "Darin Cox" <[EMAIL PROTECTED]> To: Sent: Monday, September 19, 2005 10:11 AM Subject: Re: [De

Re: [Declude.Virus] New Variant of Bagle?

2005-09-19 Thread Darin Cox
There may be a new variant of Bagle. There was a new one just last week. You should make sure your FProt defs are up to date. If it is a new variant, you may want to block these files in your virus.cfg at least until the defs have been updated to catch it. Darin. - Original Message -