Re: [Fwd: Re: Another round of viruses - encrypted this time]

[Steven Pritchard <steve@silug.org>]

On Wed, Mar 03, 2004 at 01:37:31PM -0600, Todd Davis wrote:
> For those running MailScanner, it now supports the detection of
> encrypted zip files.

It looks like clamav is catching them now (somehow).  (I noticed this
right after giving up and putting in rules to block all zip files.)

 Submission: 1678
 Sender: Bill Boebel
 Submitted virus name: Unknown Virus
 Virus name: Worm.Bagle.F-zippwd-6
 Virus name: Worm.Bagle.F-zippwd-7
 Notes: Worm.Bagle.H found in unzipped attachment. New 
 Notes: signatures added to detect e-mail. Will this ever 
 Notes: stop?
 Added: Yes

 Submission: 1656
 Sender: Mike
 Submitted virus name: Bagle
 Virus name: Worm.Bagle.F-zippwd-5
 Notes: Another variant of e-mail infected with password protected Bagle zip
 Notes: file
 Notes: Submission reviewed by Denis De Messemacker
 Added: Yes
 
 Submission: 1659
 Sender: Dave Funk
 Submitted virus name: Bagle
 Virus name: Worm.Bagle.F-zippwd-4
 Notes: Another variant of e-mail infected with password protected Bagle zip
 Notes: file
 Notes: Submission reviewed by Denis De Messemacker
 Added: Yes

http://sourceforge.net/mailarchive/forum.php?thread_id=3948954&forum_id=34654
http://sourceforge.net/mailarchive/forum.php?thread_id=3948172&forum_id=34654

And so on...

-- 
steve@silug.org           | Southern Illinois Linux Users Group
(618)398-7360             | See web site for meeting details.
Steven Pritchard          | http://www.silug.org/

-
To unsubscribe, send email to majordomo@luci.org with
"unsubscribe luci-discuss" in the body.