RE: missed by AV programs

2005-09-20 Thread Rob McEwen
>F-Secure now detects Rob's sample: >Email-Worm.Win32.Bagle.de, F-Secure AVP, Email-Worm.Win32.Bagle.de >cheers, >wolfgang BTW - Due to what Wolfgang and Pierre have reported about F-Secure's fast turnaround and distribution of definitions, I downloaded and started testing an evaluation version of

Re: missed by AV programs

2005-09-19 Thread Chr. v. Stuckrad
On Mon, Sep 19, 2005 at 03:55:12PM -0400, Rob McEwen (PowerView Systems) wrote: > RE: missed by great AV programs > > (keeping in mind that these I'm mentioned may catch up by the time you read > this) > Right, in the time since you wrote this, NAI (McAffee) first sent an extra ALERT-Letter, th

Re: missed by AV programs

2005-09-19 Thread wolfgang
In an older episode (Monday, 19. September 2005 22:09), Pierre Thomson wrote: > Rob McEwen (PowerView Systems) wrote: > > RE: missed by great AV programs > > > > SEE: > > http://www.pvsys.com/missedvirus.txt > > > > Update: it's probaby this new Bagle variant (F-Secure is one of the fastest to

Re: missed by AV programs

2005-09-19 Thread List Mail User
>... >RE: missed by great AV programs > >SEE: >http://www.pvsys.com/missedvirus.txt > >This came in today and I ran this against ClamAV, McAfee, Sophos... all with >the latest definitions > >(at least as of the time that I write this, 9/19/05 3:45 pm EST). > >It is strange that NONE of these 3 cat

Fwd: 1924337 - File Submission (RE: missed by AV programs (OT))

2005-09-19 Thread wolfgang
-- Forwarded Message -- Subject: 1924337 - File Submission Date: Monday, 19. September 2005 22:49 From: Virus Research <[EMAIL PROTECTED]> AVERT Labs - Beaverton Current Scan Engine Version:4.4.00 Current DAT Version:4584 Thank you for your submission. Analysis ID: 192433

Re: missed by AV programs

2005-09-19 Thread wolfgang
In an older episode (Monday, 19. September 2005 22:07), Rob McEwen (PowerView Systems) wrote: > > Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus? > > Good point. OK. Per your suggestion, I just submitted it to ClamAV (since that is the one I actually use for my mail server)

Re: missed by AV programs

2005-09-19 Thread qqqq
t; <[EMAIL PROTECTED]>; Sent: Monday, September 19, 2005 2:11 PM Subject: Re: missed by AV programs | Rob McEwen (PowerView Systems) wrote: | >>Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus? | > | > | > Good point. OK. Per your suggestion, I just submitted

Re: missed by AV programs

2005-09-19 Thread Jim Maul
Rob McEwen (PowerView Systems) wrote: Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus? Good point. OK. Per your suggestion, I just submitted it to ClamAV (since that is the one I actually use for my mail server). I wouldn't have brought it up on this list except I've nev

RE: missed by AV programs

2005-09-19 Thread Pierre Thomson
Rob McEwen (PowerView Systems) wrote: > RE: missed by great AV programs > > SEE: > http://www.pvsys.com/missedvirus.txt > Update: it's probaby this new Bagle variant (F-Secure is one of the fastest to update their web site): http://www.f-secure.com/v-descs/bagle_bi.shtml Pierre

Re: missed by AV programs

2005-09-19 Thread Rob McEwen (PowerView Systems)
> Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus? Good point. OK. Per your suggestion, I just submitted it to ClamAV (since that is the one I actually use for my mail server). I wouldn't have brought it up on this list except I've never seen this happen before... especiall

RE: missed by AV programs (OT)

2005-09-19 Thread Pierre Thomson
From: Rob McEwen (PowerView Systems) [mailto:[EMAIL PROTECTED] Sent: Monday, September 19, 2005 3:55 PM To: users@spamassassin.apache.org Subject: missed by AV programs RE: missed by great AV programs SEE: http://www.pvsys.com/missedvirus.txt This came in today and I ran this against ClamAV,

Re: missed by AV programs

2005-09-19 Thread Chris Stone
We submitted the ones here to ClamAV this afternoon - file I am seeing here is new___price.zip. > Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus? > > Rob McEwen (PowerView Systems) wrote: >> RE: missed by great AV programs >> >> SEE: >> http://www.pvsys.com/missedvirus.txt >

Re: missed by AV programs

2005-09-19 Thread M.Lewis
Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus? Rob McEwen (PowerView Systems) wrote: RE: missed by great AV programs SEE: http://www.pvsys.com/missedvirus.txt This came in today and I ran this against ClamAV, McAfee, Sophos... all with the latest definitions (at least

missed by AV programs

2005-09-19 Thread Rob McEwen (PowerView Systems)
RE: missed by great AV programs SEE: http://www.pvsys.com/missedvirus.txt This came in today and I ran this against ClamAV, McAfee, Sophos... all with the latest definitions (at least as of the time that I write this, 9/19/05 3:45 pm EST). It is strange that NONE of these 3 catch this message