1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

New Virus

Discussion in 'General Malware And Security' started by John Tiesi, Apr 1, 2008.

  1. John Tiesi

    John Tiesi Guest

    Recently our station has seen an increase in messages with attach.zip
    attached to the message. I'm treating it as a virus but my scanner isn't
    catching it. Any ideas what it is?
     
    John Tiesi, Apr 1, 2008
    #1
  3. Malke

    Malke Guest

    John Tiesi wrote:
    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Recently our station has seen an increase in messages with attach.zip
    > attached to the message. I'm treating it as a virus but my scanner isn't
    > catching it. Any ideas what it is?<!--colorc--><!--/colorc-->

    It could be anything. You might want to submit it to Virus Total for
    identification. Virus Total will send it to numerous antivirus companies
    and then send you a report.



    Malke
    --
    MS-MVP
    Elephant Boy Computers

    Don't Panic!
     
    Malke, Apr 1, 2008
    #2
  4. Volodymyr M. Shcherbyna

    Volodymyr M. Shcherbyna Guest

    Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
    file, just give a try different scanners to scan those attachments.

    --
    V.
    This posting is provided "AS IS" with no warranties, and confers no
    rights.
    "John Tiesi" <jtiesinospam@unm.edu> wrote in message
    news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Recently our station has seen an increase in messages with attach.zip
    > attached to the message. I'm treating it as a virus but my scanner isn't
    > catching it. Any ideas what it is?
    >
    > <!--colorc--><!--/colorc-->
     
    Volodymyr M. Shcherbyna, Apr 2, 2008
    #3
  5. Milo

    Milo Guest

    It depends on the zip algorithm and are we sure if its really just a zip or
    just a namesake of the file... and if your system or network is being
    bombarded by this file it means there has been intrusions already this is the
    called file.




    --
    Milo



    "Volodymyr M. Shcherbyna" wrote:
    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
    > file, just give a try different scanners to scan those attachments.
    >
    > --
    > V.
    > This posting is provided "AS IS" with no warranties, and confers no
    > rights.
    > "John Tiesi" <jtiesinospam@unm.edu> wrote in message
    > news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
    > > Recently our station has seen an increase in messages with attach.zip
    > > attached to the message. I'm treating it as a virus but my scanner isn't
    > > catching it. Any ideas what it is?
    > >
    > > <!--colorc--><!--/colorc-->
    >
    >
    > <!--colorc--><!--/colorc-->
     
    Milo, Apr 3, 2008
    #4
  6. Milo

    Milo Guest

    I found this site can evaluate and tell you if what you submitted if
    malicious or not.



    choose to submit a sample

    --
    Milo



    "Milo" wrote:
    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > It depends on the zip algorithm and are we sure if its really just a zip or
    > just a namesake of the file... and if your system or network is being
    > bombarded by this file it means there has been intrusions already this is the
    > called file.
    >
    >
    >
    >
    > --
    > Milo
    >
    >
    >
    > "Volodymyr M. Shcherbyna" wrote:
    > <!--coloro:green--><span style="color:green <!--/coloro-->
    > > Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
    > > file, just give a try different scanners to scan those attachments.
    > >
    > > --
    > > V.
    > > This posting is provided "AS IS" with no warranties, and confers no
    > > rights.
    > > "John Tiesi" <jtiesinospam@unm.edu> wrote in message
    > > news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    > > > Recently our station has seen an increase in messages with attach.zip
    > > > attached to the message. I'm treating it as a virus but my scanner isn't
    > > > catching it. Any ideas what it is?
    > > >
    > > > <!--colorc--><!--/colorc-->
    > >
    > >
    > > <!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
     
    Milo, Apr 3, 2008
    #5
  7. Volodymyr M. Shcherbyna

    Volodymyr M. Shcherbyna Guest

    If your network get's bombarded by some kind of zip file, for sure,
    something wrong is here. I think this zip file should be analyzed.

    --
    V.
    This posting is provided "AS IS" with no warranties, and confers no
    rights.
    "Milo" <anisha@indiamail.com> wrote in message
    news:D98DCFA4-047E-4263-9305-EE8D22E5B331@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > It depends on the zip algorithm and are we sure if its really just a zip
    > or
    > just a namesake of the file... and if your system or network is being
    > bombarded by this file it means there has been intrusions already this is
    > the
    > called file.
    >
    >
    >
    >
    > --
    > Milo
    >
    >
    >
    > "Volodymyr M. Shcherbyna" wrote:
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    >> Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
    >> file, just give a try different scanners to scan those attachments.
    >>
    >> --
    >> V.
    >> This posting is provided "AS IS" with no warranties, and confers no
    >> rights.
    >> "John Tiesi" <jtiesinospam@unm.edu> wrote in message
    >> news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >> > Recently our station has seen an increase in messages with attach.zip
    >> > attached to the message. I'm treating it as a virus but my scanner
    >> > isn't
    >> > catching it. Any ideas what it is?
    >> >
    >> ><!--colorc--><!--/colorc-->
    >>
    >>
    >> <!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
     
    Volodymyr M. Shcherbyna, Apr 4, 2008
    #6
  8. John Tiesi

    John Tiesi Guest

    File was submitted and found to be clean.


    "Volodymyr M. Shcherbyna" <v_scherbina@online.mvps.org> wrote in message
    news:uWYcROllIHA.5956@TK2MSFTNGP03.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > If your network get's bombarded by some kind of zip file, for sure,
    > something wrong is here. I think this zip file should be analyzed.
    >
    > --
    > V.
    > This posting is provided "AS IS" with no warranties, and confers no
    > rights.
    > "Milo" <anisha@indiamail.com> wrote in message
    > news:D98DCFA4-047E-4263-9305-EE8D22E5B331@microsoft.com...<!--coloro:green--><span style="color:green <!--/coloro-->
    >> It depends on the zip algorithm and are we sure if its really just a zip
    >> or
    >> just a namesake of the file... and if your system or network is being
    >> bombarded by this file it means there has been intrusions already this is
    >> the
    >> called file.
    >>
    >>
    >>
    >>
    >> --
    >> Milo
    >>
    >>
    >>
    >> "Volodymyr M. Shcherbyna" wrote:
    >><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >>> Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
    >>> file, just give a try different scanners to scan those attachments.
    >>>
    >>> --
    >>> V.
    >>> This posting is provided "AS IS" with no warranties, and confers no
    >>> rights.
    >>> "John Tiesi" <jtiesinospam@unm.edu> wrote in message
    >>> news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...
    >>> > Recently our station has seen an increase in messages with attach.zip
    >>> > attached to the message. I'm treating it as a virus but my scanner
    >>> > isn't
    >>> > catching it. Any ideas what it is?
    >>> >
    >>> >
    >>>
    >>>
    >>><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
    >
    > <!--colorc--><!--/colorc-->
     
    John Tiesi, Apr 4, 2008
    #7

Share This Page