New Virus

[John Tiesi]

Recently our station has seen an increase in messages with attach.zip
attached to the message. I'm treating it as a virus but my scanner isn't
catching it. Any ideas what it is?

 

[Malke]

John Tiesi wrote:

> Recently our station has seen an increase in messages with attach.zip
> attached to the message. I'm treating it as a virus but my scanner isn't
> catching it. Any ideas what it is?

It could be anything. You might want to submit it to Virus Total for
identification. Virus Total will send it to numerous antivirus companies
and then send you a report.

http://www.virustotal.com/

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

 

[Volodymyr M. Shcherbyna]

Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
file, just give a try different scanners to scan those attachments.

--
V.
This posting is provided "AS IS" with no warranties, and confers no
rights.
"John Tiesi" <jtiesinospam@unm.edu> wrote in message
news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...
> Recently our station has seen an increase in messages with attach.zip
> attached to the message. I'm treating it as a virus but my scanner isn't
> catching it. Any ideas what it is?
>
>

 

[Milo]

It depends on the zip algorithm and are we sure if its really just a zip or
just a namesake of the file... and if your system or network is being
bombarded by this file it means there has been intrusions already this is the
called file.




--
Milo



"Volodymyr M. Shcherbyna" wrote:

> Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
> file, just give a try different scanners to scan those attachments.
>
> --
> V.
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> "John Tiesi" <jtiesinospam@unm.edu> wrote in message
> news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...
> > Recently our station has seen an increase in messages with attach.zip
> > attached to the message. I'm treating it as a virus but my scanner isn't
> > catching it. Any ideas what it is?
> >
> >
>
>
>

 

[Milo]

I found this site can evaluate and tell you if what you submitted if
malicious or not.

http://subwiz.trendmicro.com/SubWiz/Default.asp

choose to submit a sample

--
Milo



"Milo" wrote:

> It depends on the zip algorithm and are we sure if its really just a zip or
> just a namesake of the file... and if your system or network is being
> bombarded by this file it means there has been intrusions already this is the
> called file.
>
>
>
>
> --
> Milo
>
>
>
> "Volodymyr M. Shcherbyna" wrote:
>
> > Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
> > file, just give a try different scanners to scan those attachments.
> >
> > --
> > V.
> > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> > "John Tiesi" <jtiesinospam@unm.edu> wrote in message
> > news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...
> > > Recently our station has seen an increase in messages with attach.zip
> > > attached to the message. I'm treating it as a virus but my scanner isn't
> > > catching it. Any ideas what it is?
> > >
> > >
> >
> >
> >

 

[Volodymyr M. Shcherbyna]

If your network get's bombarded by some kind of zip file, for sure,
something wrong is here. I think this zip file should be analyzed.

--
V.
This posting is provided "AS IS" with no warranties, and confers no
rights.
"Milo" <anisha@indiamail.com> wrote in message
news98DCFA4-047E-4263-9305-EE8D22E5B331@microsoft.com...
> It depends on the zip algorithm and are we sure if its really just a zip
> or
> just a namesake of the file... and if your system or network is being
> bombarded by this file it means there has been intrusions already this is
> the
> called file.
>
>
>
>
> --
> Milo
>
>
>
> "Volodymyr M. Shcherbyna" wrote:
>
>> Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
>> file, just give a try different scanners to scan those attachments.
>>
>> --
>> V.
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> "John Tiesi" <jtiesinospam@unm.edu> wrote in message
>> news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...
>> > Recently our station has seen an increase in messages with attach.zip
>> > attached to the message. I'm treating it as a virus but my scanner
>> > isn't
>> > catching it. Any ideas what it is?
>> >
>> >
>>
>>
>>

 

[John Tiesi]

File was submitted and found to be clean.


"Volodymyr M. Shcherbyna" <v_scherbina@online.mvps.org> wrote in message
news:uWYcROllIHA.5956@TK2MSFTNGP03.phx.gbl...
> If your network get's bombarded by some kind of zip file, for sure,
> something wrong is here. I think this zip file should be analyzed.
>
> --
> V.
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> "Milo" <anisha@indiamail.com> wrote in message
> news98DCFA4-047E-4263-9305-EE8D22E5B331@microsoft.com...
>> It depends on the zip algorithm and are we sure if its really just a zip
>> or
>> just a namesake of the file... and if your system or network is being
>> bombarded by this file it means there has been intrusions already this is
>> the
>> called file.
>>
>>
>>
>>
>> --
>> Milo
>>
>>
>>
>> "Volodymyr M. Shcherbyna" wrote:
>>
>>> Scanners may fail if the zip is encrypted. If it's pure unencrypted zip
>>> file, just give a try different scanners to scan those attachments.
>>>
>>> --
>>> V.
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>> "John Tiesi" <jtiesinospam@unm.edu> wrote in message
>>> news:%23CbqyZAlIHA.2304@TK2MSFTNGP05.phx.gbl...
>>> > Recently our station has seen an increase in messages with attach.zip
>>> > attached to the message. I'm treating it as a virus but my scanner
>>> > isn't
>>> > catching it. Any ideas what it is?
>>> >
>>> >
>>>
>>>
>>>
>
>