Hi all,
has anyone any XMail antivirus filter that is able to catch W32/[EMAIL PROTECTED]
virus (spreading since yesterday)? As virus .exe file is inside
password-protected zip, my f-prot for dos isn't able to detect it.
Roman
-
To unsubscribe from this list: send the line unsubscribe xmail
If you're using Linux I've got a filter that catches all bad attachments
whether they're directly in the message or in a zip file.
Let me know if you want it.
Adrian Hicks
--
MIS Facilities Manager
Auston Int'l Group Ltd
45 Middle Rd, #01-00 Auston Unicentre
Tel: (65) 6339 4800 ext. 229
/tmp/01e1fa7d3bac8e14.scan//Message.zip
Date: 3.03.2004 Time: 17:21:43 Size: 12422
ALERT: [Worm/Bagle.J worm] /tmp/01e1fa7d3bac8e14.scan//Message.zip
Contains signature of the worm Worm/Bagle.J
1.17 + Peter's AV filter + AntiVir gets it fine. Run some updates on the
definitions. -Jim
I am also running Peter's av filter with f-prot and clamav and none
catched it but luckily on my windows workstation I have nod32 which
catch it and delete it.
I am just wondering: is there maybe an option in the Peter's av filter
to delete message if it has a password protected zip attachment?
I just installed clamav 0.67 and the did freshclam to update. It now
detects the virus.
Sasa Stupar wrote:
I am also running Peter's av filter with f-prot and clamav and none
catched it but luckily on my windows workstation I have nod32 which
catch it and delete it.
I am just wondering:
I also noticed clamav wasn't detecting the password-protected .zip files
yesterday.
But it is today (after a freshclam):
Readme.zip: Worm.Bagle.Gen-zippwd FOUND
--- SCAN SUMMARY ---
Known viruses: 20381
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.04
I've put in Igor Reno's attach filter but I'm not having any luck. It's =
returning a 2, but that doesn't mean a bunch to me :) Here's the =
messages that I see in debug mode and nothing is going into the attach log =
files (since it isn't seeing the test .zip file as an attachment). My =
Which version do you have installed? Please post this on the xmailforum
also, Igor is reading it constantly ( http://xmailforum.homelinux.net )
--Sasa
Dale Qualls pravi:
I've put in Igor Reno's attach filter but I'm not having any luck. It's =
returning a 2, but that doesn't mean a bunch to
There isn't a version in the attach.pl or the attach.conf, any clue where =
I'd look?
xmail 1.18
clamav
Peter's AV filter
latest MIME::Lite
I'll cross post now, thanks for the info!
[EMAIL PROTECTED] 03/04/04 01:13PM
Which version do you have installed? Please post this on the xmailforum=20
