: [Declude.Virus] Post-Declude 1.75 Password Zipped Virus
Detection
Over the last day or so one of my users has been inundated with viruses
archived in password protected zip files. I know that this technique has
been around for many months now but unfortunately when it was discussed
I just upgraded to Beta 1.79 and added the BANEXT EZIP line to my
virus.cfg file.
How will I be able to tell if these glitches are occuring?
If any seemingly legitimate .ZIP files get blocked, you can upgrade to the
interim. There is a problem with some .ZIP programs that do not comply to
the
When messages with Encrypted Zip Attachments are caught where do the
messages end up? Is it in the SPAM directory, the VIRUS directory or
somewhere else?
Only Declude Virus is involved in encrypted .ZIP files, so they get moved
to the \IMail\spool\virus directory.
Hello, All,
Over the last day or so one of my users has been
inundated with viruses archived in password protected zip files. I know
that this technique has been around for many months now but unfortunately when
it was discussed on this list I did not have a current service agreement so I
Over the last day or so one of my users has been inundated with viruses
archived in password protected zip files. I know that this technique has
been around for many months now but unfortunately when it was discussed on
this list I did not have a current service agreement so I didn't pay
100% of them will get caught if you upgrade to the latest beta (1.79) and
use a line BANEXT EZIP in your \IMail\Declude\virus.cfg file.
I had to install 1.79i4 (or 5 can't remember) with standard version of
Declude Virus for BANEXT EZIP to work properly.
Franco Celli
---
[Quipo ISP - Questa
For Standard AV the correct version is 1.79i6 released on 4/29/04
Franco Celli
---
[Quipo ISP - Questa E-mail e' stata controllata dal programma Declude Virus]
[Quipo ISP - This E-mail was scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus
Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
Sent: Tuesday, July 20, 2004 7:56
AM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus]
Post-Declude 1.75 Password Zipped Virus Detection
Hello, All,
Over the last day or so one of my
users has been inundated
(See Scott s reply) BANEXT EZIP (as well as the BANEXT ZIP) works
well. Remember, even legit ZIPs are held.
It's very important that people understand the distinction between those
(specifically, there is no need to block legitimate .ZIP files).
BANEXT ZIP works like any other BANEXT option,
Is upgrading to Beta 1.79 sufficient or am I also going to need to get a
specific interim release as well?
Upgrading to 1.79 will ban the encrypted .ZIP files, but the latest interim
takes care of a few glitches with the initial implementation.
10 matches
Mail list logo
