http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=133409
Mcafee Dat 4473 should detect it.
----- Original Message ----- From: "Donn Bly" <[EMAIL PROTECTED]>
To: <Declude.Virus@declude.com>
Sent: Monday, May 02, 2005 2:28 PM
Subject: RE: [Declude.Virus] Viruses appearing to be getting through...
I'm seeing it here. Neither Norton or FPROT detect it as a virus yet. The non-encrypted Zip file includes a .PIF file, but the filename seems to be mangled in some way.
For now I have added
BANNAME account_info.zip
to my config. With your report, I have added account_info-text.zip as well.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Chuck Schick Sent: Monday, May 02, 2005 12:58 PM To: Declude. Virus Subject: [Declude.Virus] Viruses appearing to be getting through...
I am seeing several files getting through that appear to have viruses attached as zip files. I am running Declude with F-Prot. We ban encrypted zips and I have error code 8 included. Anyone else seeing this behavior? Here is part of the log.
05/02/2005 10:34:20 Q568a382 MIME file: account_info-text.zip [base64; Length=53728 Checksum=5837399] 05/02/2005 10:34:21 Q568a382 Scanned: Virus Free [MIME: 2 53979]
Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This email has been scanned for possible viruses by Declude Antivirus. For more information on Declude Antivirus, Visit www.declude.com
--- This email has been scanned for possible viruses by Declude Antivirus. For more information on Declude Antivirus, Visit www.declude.com
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
