>F-Secure now detects Rob's sample:
>Email-Worm.Win32.Bagle.de, F-Secure AVP, Email-Worm.Win32.Bagle.de
>cheers,
>wolfgang
BTW - Due to what Wolfgang and Pierre have reported about F-Secure's fast
turnaround and distribution of definitions, I downloaded and started testing
an evaluation version of
On Mon, Sep 19, 2005 at 03:55:12PM -0400, Rob McEwen (PowerView Systems) wrote:
> RE: missed by great AV programs
>
> (keeping in mind that these I'm mentioned may catch up by the time you read
> this)
>
Right, in the time since you wrote this, NAI (McAffee) first
sent an extra ALERT-Letter, th
In an older episode (Monday, 19. September 2005 22:09), Pierre Thomson wrote:
> Rob McEwen (PowerView Systems) wrote:
> > RE: missed by great AV programs
> >
> > SEE:
> > http://www.pvsys.com/missedvirus.txt
> >
>
> Update: it's probaby this new Bagle variant (F-Secure is one of the fastest
to
>...
>RE: missed by great AV programs
>
>SEE:
>http://www.pvsys.com/missedvirus.txt
>
>This came in today and I ran this against ClamAV, McAfee, Sophos... all with
>the latest definitions
>
>(at least as of the time that I write this, 9/19/05 3:45 pm EST).
>
>It is strange that NONE of these 3 cat
-- Forwarded Message --
Subject: 1924337 - File Submission
Date: Monday, 19. September 2005 22:49
From: Virus Research <[EMAIL PROTECTED]>
AVERT Labs - Beaverton
Current Scan Engine Version:4.4.00
Current DAT Version:4584
Thank you for your submission.
Analysis ID: 192433
In an older episode (Monday, 19. September 2005 22:07), Rob McEwen (PowerView
Systems) wrote:
> > Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
>
> Good point. OK. Per your suggestion, I just submitted it to ClamAV (since
that is the one I actually use for my mail server)
t; <[EMAIL PROTECTED]>;
Sent: Monday, September 19, 2005 2:11 PM
Subject: Re: missed by AV programs
| Rob McEwen (PowerView Systems) wrote:
| >>Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
| >
| >
| > Good point. OK. Per your suggestion, I just submitted
Rob McEwen (PowerView Systems) wrote:
Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
Good point. OK. Per your suggestion, I just submitted it to ClamAV (since that
is the one I actually use for my mail server).
I wouldn't have brought it up on this list except I've nev
Rob McEwen (PowerView Systems) wrote:
> RE: missed by great AV programs
>
> SEE:
> http://www.pvsys.com/missedvirus.txt
>
Update: it's probaby this new Bagle variant (F-Secure is one of the fastest to
update their web site):
http://www.f-secure.com/v-descs/bagle_bi.shtml
Pierre
> Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
Good point. OK. Per your suggestion, I just submitted it to ClamAV (since that
is the one I actually use for my mail server).
I wouldn't have brought it up on this list except I've never seen this happen
before... especiall
From: Rob McEwen (PowerView Systems) [mailto:[EMAIL PROTECTED]
Sent: Monday, September 19, 2005 3:55 PM
To: users@spamassassin.apache.org
Subject: missed by AV programs
RE: missed by great AV programs
SEE:
http://www.pvsys.com/missedvirus.txt
This came in today and I ran this against ClamAV,
We submitted the ones here to ClamAV this afternoon - file I am seeing here is
new___price.zip.
> Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
>
> Rob McEwen (PowerView Systems) wrote:
>> RE: missed by great AV programs
>>
>> SEE:
>> http://www.pvsys.com/missedvirus.txt
>
Have you submitted it to ClamAV, McAfee, or Sophos as a missed virus?
Rob McEwen (PowerView Systems) wrote:
RE: missed by great AV programs
SEE:
http://www.pvsys.com/missedvirus.txt
This came in today and I ran this against ClamAV, McAfee, Sophos... all with
the latest definitions
(at least
RE: missed by great AV programs
SEE:
http://www.pvsys.com/missedvirus.txt
This came in today and I ran this against ClamAV, McAfee, Sophos... all with
the latest definitions
(at least as of the time that I write this, 9/19/05 3:45 pm EST).
It is strange that NONE of these 3 catch this message
14 matches
Mail list logo