what is Worm.SomeFool.Gen-2 virus ?

proftpd

Worm.SomeFool.Gen-2

是什么病毒？？

雨杉

我也遇到了！烦呀！

Attention: aaa@test.com


A virus was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.

The virus was reported to be:

Worm.SomeFool.Gen-1


Please update your virus scanner or contact your IT support
personnel as soon as possible as you may have a virus on your system.


Your message was sent with the following envelope:

MAIL FROM: aaa@test.com
RCPT TO:   aaa@test.com

... and with the following headers:

---
MAILFROM:aaa@test.com
Received: from unknown (HELO test.com) (12.0.0.1)
  by 0 with SMTP; 29 Mar 2004 08:06:49 +0800
From: aaa@test.com
To: aaa@test.com
Subject: Re: Re: Re: Re:
Date: Mon, 29 Mar 2004 08:08:50 +0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_0009_00005F16.00000BCD"
X-Priority: 3
X-MSMail-Priority: Normal


---

查了很多，都查不到有关此病毒的相关信息，大家有遇到吗？

lzyking

用 clamav 过滤病毒软件可以完全过滤掉的

sendmail 上的安装方法可以看看这篇文章
http://bbs.chinaunix.net/forum/14/20040401/294009.html

qmail也可以安装这个软件的

雨杉

就是用clamav查出来的！
但发信的机器就是查不出有什么病毒。但发出的信clamav提示有些病毒，都晕了！

雨杉

顶一下，大家都没遇到过吗？
  我想安装了clamav都会有这个问题吧？

joecen

我也发现很多。都是用clamav扫出并拦截掉的。

2004-04-05 12:42:07,,ail.postfix@mx49.mail.sohu.com,3dlilean@XXXXX.com.cn, delivery failure (3dlilean@XXXXX.com.cn),Worm.SomeFool.Q,0,message.pif,20040101,0
2004-04-05 12:42:24,,wylbel@yahoo.com.cn,jason@XXXXX.com.cn, server error (jason@XXXXX.com.cn),Worm.SomeFool.Q,0,message.pif,20040101,0
2004-04-05 12:44:45,,support@rarsoft.de,a1glilean@XXXXX.com.cn, unknown exception (a1glilean@XXXXX.com.cn),Worm.SomeFool.Q,0,message.pif,20040101,0

akid

好像是Netsky病毒的别称。

proftpd

[quote]原帖由 "akid"]好像是Netsky病毒的别称。[/quote 发表：


我觉得也是。

clamav 起的名字和其他KillVIrus Software 不一样。

雨杉

麻烦呀！
   老是有这样的病毒，但就是查不出来！