New Virus with Fake Microsoft Address...

[shrek-m at gmx.de]

Ulysees wrote:

>Is there already a damaged version of this doing the rounds or are both
>SophosSavi & ClamAv not detecting it right ?
>I recieved a mail like this earlier with an attachment of Q841428.exe the
>virus scanners don't have any issue with it (glad .exes are blocked)
>md5sum on the file is b09e26c292759d654633d3c8ed00d18d
>if someone could compare to a known bad copy I'd appreciate it.
>

$ md5sum patch71.exe
b09e26c292759d654633d3c8ed00d18d  patch71.exe

$ sweep patch71.exe
 >>> Virus 'W32/Gibe-F' found in file patch71.exe

--
shrek-m