[Dshield] New Agobot infection here?
tonye at billy.demon.nl
Wed Mar 3 23:49:33 GMT 2004
ons, 03.03.2004 kl. 22.02 skrev TRushing at hollandco.com:
> Upon checking out the link, there were Sophos warnings
> 'Troj/Seeker-F' and
> Sophos claimed to have deleted the files.
> I have not examined the html coming from that URL. I've been looking at
> the various processes and they look like a variant of AGOBOT. I see that
> Sophos has updated their virus definitions for numerous AGOBOT variants
> this morning, but I believe we have that update.
Why not rather write this mail to Sophos' support department or call
it? That's a pretty good department and very swift to react. Having
bought Sophos' product, you'd have 24x7 support. Oh you have done that?
What did the people there advise?
mail: billy - at - billy.demon.nl
More information about the list