🚀 go-pugleaf

4ms2u$ms@michaels.demon.co.uk (Michael Salem) wrote in message news:<20010531.0920.20925snz@michaels.demon.co.uk>...

Magistr has arrived as an attachment when I received it. I'm only
writing to note a new behavior: it has arrived in a blank e-mail, and
as a single attachment (Symantec's site notes that e-mails have random
text, and more than one attachment). That change alone may not be
worth noting, but if the virus is being embedded in HTML, it would
seem to indicate a very determined virus-author with the skills to
pursue all delivery avenues.

> Tonja wrote:
> 
> > After downloading "kaspersky lab's avp" the following was found:
> > (my former virusscanner didn't find infected files though)
> > 
> > DST)]:\IDLE32.EXE infected: I-Worm.Magistr
> > 
> > I think this is about a mail I received from somebody I don't know. It
> > didn't have an attachment but the text in the mail was in some code.
> > After deleting the mail I scanned my system for the second time and nothing
> > was found. Isn't that strange?
> 
> If your virus scanner first reports a virus and cleans it; a later 
> report finds no virus; but you still see signs of infection, it means 
> the scanner doesn't deal properly with this virus. Quite common with 
> new viruses; later versions of scanners do better.