Re: [Declude.Virus] Netsky.P Occasionally Slips through?

[Jonathan]

Actually, I am running the newest F-Prot, and they're still slipping 
through. Winzip opens these files just fine as well, and Symantec Corp 
seems to be able to scan and detect the issue without any problems. They 
keep rolling in, makes me a little nervous, and customers sure hate it.

I'd block the suspicious ones from F-Prot, but I just know people are 
tossing around macro'd XLS and DOCs all the time.

Jonathan

At 06:44 AM 3/30/2004, you wrote:


I sent one. There have been several, not sure if the one I sent is 
indicative of all of them, but it's the only one I could easily get out 
of a local quarantine.
A standard copy of pkunzip.exe won't extract the virus from the .ZIP file 
you sent, so it is probably corrupt.

I would recommend upgrading to the latest version of F-Prot -- I believe 
that they came out with a new version to address .ZIP files like this one.

                                                   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.