From clamav-users-bounces@lists.clamav.net Wed Apr 25 22:53:19 2007 Return-Path: X-Original-To: list@tad.clamav.net Delivered-To: list@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KNIleulb7M-y; Wed, 25 Apr 2007 22:53:19 +0200 (CEST) Received: from tad.clamav.net (localhost.localdomain [127.0.0.1]) by tad.clamav.net (Postfix) with ESMTP id D9E04324006; Wed, 25 Apr 2007 22:53:08 +0200 (CEST) X-Original-To: clamav-users@tad.clamav.net Delivered-To: clamav-users@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AVBFC2N27uh6 for ; Wed, 25 Apr 2007 22:53:06 +0200 (CEST) Received: from bay0-omc2-s20.bay0.hotmail.com (bay0-omc2-s20.bay0.hotmail.com [65.54.246.156]) by tad.clamav.net (Postfix) with ESMTP id B832F31C02D for ; Wed, 25 Apr 2007 22:53:05 +0200 (CEST) Received: from hotmail.com ([65.54.187.68]) by bay0-omc2-s20.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Wed, 25 Apr 2007 13:53:04 -0700 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 25 Apr 2007 13:53:04 -0700 Message-ID: Received: from 65.73.174.4 by by18fd.bay18.hotmail.msn.com with HTTP; Wed, 25 Apr 2007 20:53:03 GMT X-Originating-IP: [65.73.174.4] X-Originating-Email: [mr88talent@hotmail.com] X-Sender: mr88talent@hotmail.com From: "Gary V" To: clamav-users@lists.clamav.net Date: Wed, 25 Apr 2007 14:53:03 -0600 Mime-Version: 1.0 X-OriginalArrivalTime: 25 Apr 2007 20:53:04.0847 (UTC) FILETIME=[B870B5F0:01C7877B] Subject: [Clamav-users] new password protected .rar virus X-BeenThere: clamav-users@lists.clamav.net X-Mailman-Version: 2.1.9 Precedence: list Reply-To: ClamAV users ML List-Id: ClamAV users ML List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0594074500==" Mime-version: 1.0 Sender: clamav-users-bounces@lists.clamav.net Errors-To: clamav-users-bounces@lists.clamav.net --===============0594074500== Content-Type: text/plain; format=flowed I received an email with a password protected .rar file that claims to contain an .exe file that I should run in ordrer to protect me from an undetected worm. I submitted it and it was recognized as Email.Phishing.RB-686. The only other anti virus vendor to recognize it at this moment is McAfee (W32/Nuwar@MM!rar). Without opening the attachment, it seems to me there is a possibility this is more serious than a Phishing class of malware. Is this worth further evaluation? If so, who should I send it to? Gary V _________________________________________________________________ Download Messenger. Join the i’m Initiative. Help make a difference today. http://im.live.com/messenger/im/home/?source=TAGHM_APR07 --===============0594074500== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html --===============0594074500==--