Virus submission

[SubSpace]

So I ran into a new Live Messenger worm a few hours ago that doesn't yet seem to be detected by any scanner I've tried so far.. It sends you a link to a 'picture' that actually starts the download of an executable, and my sister was dumb enough to fall for it apparently

Anyway, I submitted it to a few companies, including F-Secure Security Labs. Apparently they are a JodoHost customer?
Either that, or some part of the mail system is messing up mail headers, because I received an e-mail ticket from them using the m****here.biz domain. Strange..

 

[Stephen]

So I ran into a new Live Messenger worm a few hours ago that doesn't yet seem to be detected by any scanner I've tried so far.. It sends you a link to a 'picture' that actually starts the download of an executable, and my sister was dumb enough to fall for it apparently

Anyway, I submitted it to a few companies, including F-Secure Security Labs. Apparently they are a JodoHost customer?
Either that, or some part of the mail system is messing up mail headers, because I received an e-mail ticket from them using the m****here.biz domain. Strange..

could you send me that header in email (my forum name at jodohost) or PM if it will send properly. I'd be interested in seeing that.

 

[SubSpace]

sent

 

[Stephen]

sent

This is a case of a sloppy ticket system, surprised they aren't getting loads of bounces and even blacklistings from that, no it isn't on our server but dspam messed up the headers due to the mangled mess of headers they sent.