New Virus with Fake Microsoft Address...

[Chris Trudeau]

me too:  this is on a variant I caught :

# md5sum alxo.exe
b09e26c292759d654633d3c8ed00d18d  alxo.exe


CT


----- Original Message -----
From: "shrek-m at gmx.de" <shrek-m at GMX.DE>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Friday, September 19, 2003 6:36 AM
Subject: Re: New Virus with Fake Microsoft Address...


> Ulysees wrote:
>
> >Is there already a damaged version of this doing the rounds or are both
> >SophosSavi & ClamAv not detecting it right ?
> >I recieved a mail like this earlier with an attachment of Q841428.exe the
> >virus scanners don't have any issue with it (glad .exes are blocked)
> >md5sum on the file is b09e26c292759d654633d3c8ed00d18d
> >if someone could compare to a known bad copy I'd appreciate it.
> >
>
> $ md5sum patch71.exe
> b09e26c292759d654633d3c8ed00d18d  patch71.exe
>
> $ sweep patch71.exe
>  >>> Virus 'W32/Gibe-F' found in file patch71.exe
>
> --
> shrek-m