Plain old NAV 2003 on my Win XP workstation that scans e-mail - sorry for
not being specific.  BUT the weird thing is there was no e-mail with a PW.
I had saved the file from one that had gotten through and attached it to a
e-mail with the only the word "test" in the body of the e-mail. I don't even
have the PW to unzip it if I wanted to.  I did rename the zip VIRUS.ZIP...

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Sunday, March 07, 2004 8:52 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] NAV 2003 catches beagleJ in encrypted zip?


>I was trying to test the latest interim and when I tried to send myself a
>copy of the virus, NAV outbound scanning caught it even though it was
>passworded. I tried to unzip it to make sure and it does require a
password.
>I didn't think they could detect it like that...

Is this a NAV E-mail gateway, NAV on a client that scans E-mail, or plain 
'ole NAV that doesn't scan E-mail?  The first two can detect Bagle.J in an 
encrypted .ZIP file by grabbing the password from the E-mail.  But without 
the password (as is the case with a standard installation of NAV), it won't 
be able to detect it.

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]




---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to