[Dshield] New Agobot infection here?

Tony Earnshaw tonye at billy.demon.nl
Wed Mar 3 23:49:33 GMT 2004


ons, 03.03.2004 kl. 22.02 skrev TRushing at hollandco.com:

[...]

> Upon checking out the link, there were Sophos warnings 
> on 
> 
> 'Troj/Seeker-F' and
> 'Troj/Myss-C'

[...]

> Sophos claimed to have deleted the files.
> I have not examined the html coming from that URL.  I've been looking at 
> the various processes and they look like a variant of AGOBOT.  I see that 
> Sophos has updated their virus definitions for numerous AGOBOT variants 
> this morning, but I believe we have that update.

Why not rather write this mail to Sophos' support department  or call
it? That's a pretty good department and very swift to react. Having
bought Sophos' product, you'd have 24x7 support. Oh you have done that?
What did the people there advise?

--Tonni

-- 

mail: billy - at - billy.demon.nl
http://www.billy.demon.nl




More information about the list mailing list