Hi, My list is a bit longer and isn't it Dumaru in stead of Dumar?
FORGINGVIRUS Avril FORGINGVIRUS Braid FORGINGVIRUS Bridex FORGINGVIRUS Bugbear FORGINGVIRUS Dumaru FORGINGVIRUS Fizzer FORGINGVIRUS Gibe FORGINGVIRUS Hybris FORGINGVIRUS Klez FORGINGVIRUS Lentin FORGINGVIRUS Magistr FORGINGVIRUS Mimail FORGINGVIRUS Palyh FORGINGVIRUS Sefex FORGINGVIRUS Sober FORGINGVIRUS Sobig FORGINGVIRUS Swen FORGINGVIRUS Yaha Scott, my list also longer then the list in the sender.eml file. You are missing Avril, Gibe, Hybris, Sefex and Swen. Are those not forging virusses? I only add them to my list after receiving delivery errors which state "unkown mailbox" or something like it. Also you have Dumar in stead of Dumaru. Sophos does not know a Dumar virus but does know of a Dumaru virus. Same for F-prot. Maybe a good idea to have these standard in the virus.cfg file and adapt the *.eml files into using the line SKIPIFSENDER [Forged], that way all maintenance is done at one place, no need to update multiple eml files, no confusing the user with invalid e-mail addresses. Of course you forging dns server is even better but this is a good starting place for those that don't want that for whatever reason. Groetjes, Bonno Bloksma .... Back up my hard drive? How do I put it in reverse? ----- Original Message ----- From: "Karen D. Oland" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, November 25, 2003 7:46 PM Subject: RE: [Declude.Virus] Current Forging Virus list > I've also seen these identified with forged addresses: > > FORGINGVIRUS Mimail > FORGINGVIRUS Dumar > FORGINGVIRUS Sober > FORGINGVIRUS Holar > > > Is this a good current list? > > > > FORGINGVIRUS Braid > > FORGINGVIRUS Bridex > > FORGINGVIRUS Bugbear > > FORGINGVIRUS Hybris > > FORGINGVIRUS Lentin > > FORGINGVIRUS Klez > > FORGINGVIRUS Magistr > > FORGINGVIRUS Sobig > > FORGINGVIRUS Vulnerability > > FORGINGVIRUS Yaha > > FORGINGVIRUS Fizzer > > FORGINGVIRUS Palyh > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] > > --- [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
