Caught a few copies of a new virus sent to opf-l and held (return address was postmaster).
Redirected to my account and sent copies to Vexira. They had sig updates shortly afterwards.