Cheers Scott,

FYI >>> my Mcafee desktop AV flagged it and deleted it.

Has there been a problem with Mcafee not flagging this corrupt version of
Magistr?

Mark Chadwick
IT Support Engineer
Science International
Bateman House
82-88 Hills Road
Cambridge
UK
CB2 1LQ

Tel: +44 (0)1223 326512


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Monday, October 08, 2001 4:45 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] magistr



>Why did this virus get past Declude!!??

For several reasons.

First, it was sent in a .mbx file.  That's a proprietary IMail format, with
the virus encoded in there.  Most virus scanners won't find a virus MIME
encoded within another file.

Second, it seems that this is the corrupt version of magistr that doesn't
do any damage, which would explain why it would get past McAfee and F-Prot.
                                        -Scott

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to