>Let me know what you find out from that file
It turns out that this virus, like Gibe, also can be sent using malformed
MIME segments (in this case, it is sending an "end of file" marker about
10% of the way through the file, and is sending longer lines than are
allowed). We should have a new version of Declude Virus in the morning
that will process these two abnormalities in a way that the original file
will be seen, in case it is sent to a mail client that can decode it.
>, but it looks like F-Prot is
>not picking it up the patch.exe, I scanned the mbx file with Norton AV and
>F-Prot and only Norton Picked it up as the W32.Impo.gen@mm Virus.
That is normal. Most virus scanners will not be able to properly detect a
virus in an .mbx file, since it is in a (semi) proprietary format.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
