If you want I can send it to you, it isn't important but I found it curious.
All I know is it is a virus, it is reported as beagle.j by NAV, it is in a
passworded .Zip file, there in nothing but the word "test" in the body of
the e-mail and it is caught by the e-mail scanning as it goes out. 


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Sunday, March 07, 2004 4:30 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] NAV 2003 catches beagleJ in encrypted zip?


>Plain old NAV 2003 on my Win XP workstation that scans e-mail - sorry for
>not being specific.  BUT the weird thing is there was no e-mail with a PW.
>I had saved the file from one that had gotten through and attached it to a
>e-mail with the only the word "test" in the body of the e-mail. I don't
even
>have the PW to unzip it if I wanted to.  I did rename the zip VIRUS.ZIP...

My guess then is that it isn't really Bagle.J, but is really Bagle.F or a 
similar one.  The only way it would be able to accurately detect it would 
be to use a password cracker on the .ZIP file.

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]




---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to