I'm seeing it here.  Neither Norton or FPROT detect it as a virus yet.  The 
non-encrypted Zip file includes a .PIF file, but the filename seems to be 
mangled in some way.

For now I have added 

BANNAME account_info.zip

to my config.  With your report, I have added account_info-text.zip as well.



> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Chuck Schick
> Sent: Monday, May 02, 2005 12:58 PM
> To: Declude. Virus
> Subject: [Declude.Virus] Viruses appearing to be getting through...
> 
> 
> I am seeing several files getting through that appear to have viruses
> attached as zip files.  I am running Declude with F-Prot.  We 
> ban encrypted
> zips and I have error code 8 included.  Anyone else seeing 
> this behavior?
> Here is part of the log.
> 
> 
> 05/02/2005 10:34:20 Q568a382 MIME file: account_info-text.zip [base64;
> Length=53728 Checksum=5837399]
> 05/02/2005 10:34:21 Q568a382 Scanned: Virus Free [MIME: 2 53979]
> 
> Chuck Schick
> Warp 8, Inc.
> (303)-421-5140
> www.warp8.com
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.
> 
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to