spaces-mydooma--mix

[Kevin Spicer]

On Fri, 2004-01-30 at 19:42, shrek-m at gmx.de wrote:
> From: jrocha at mtc.gob.pe
> To: shrek-m at gmx.de
> Subject: {Virus?} HELLO
> Date: Fri, 30 Jan 2004 13:57:30 -0500
>
> At Fri Jan 30 20:01:07 2004 the virus scanner said:
>    Sophos: >>> Virus 'W95/Spaces' found in file message.zip/message.pif
>    Sophos: >>> Virus 'W32/MyDoom-A' found in file message.zip
>    ClamAV: message.zip contains Worm.SCO.A
>
Spaces is a very old virus and, according to Sophos's site, spreads in
exe files (it doesn't mention pif files).  Also its finding myDoom in
the zip, but the only file in the zip is a pif file containing a
different virus??? Where did MyDoom go?

I suspect that Spaces is a false positive - if you managed to quarantine
the file you might like to send it to Sophos for further analysis.




BMRB International
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the
recipient and may contain confidential and/or privileged
material.  If you have received this in error, please contact the
sender and delete this message immediately.  Disclosure, copying
or other action taken in respect of this email or in
reliance on it is prohibited.  BMRB International Limited
accepts no liability in relation to any personal emails, or
content of any email which does not directly relate to our
business.