MyTob.EC?

[Rick Cooper]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of chardlist
> Sent: Friday, May 20, 2005 9:39 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: MyTob.EC?
>
>
> A virus being detected by AVG as Iworm/MyTob.EC is sliding right through
> clamav.  Is anyone else having problems with this one today?

It's also being detected by bitdefender, being missed by clam and f-prot
but caught by \.pif$ filename rule. Can't tell about panda as I only have
a demo version and the sigs are from something like December 2004 (not much
of a demo)

Rick

>
> You can download a sample of it here:
>
> http://www.chard.net/virus_sample/
>
> I submitted it to ClamAV after it was not detected by their
> online scanner.
>
>
> The message that came with it was:
>
> -----Original Message-----
> From: Info at domain.com
> Date: Thu, 19 May 2005 18:38:02
> To:xxxxxx at domain.com
> Subject: Notice:***Your email account will be suspended***
>
> We have suspended some of your email services, to resolve the problem you
> should read the attached document.
>
> ------End-------
>
>
> -Brendan
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!