I think that because the virus uses it's own SMTP program the NAV software does not detect that it is an attachment. I have come to this conclusion because i have my NAV set to delete all exe atachments but it still got through. the only reason i trapped it was that i had left in place the Imail filters from when NAV let me down over the sircam virus.
What is the line i need to add into the body checker file for filtering out exe via IMgate Les. ----- Original Message ----- From: "Len Conrad" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 22, 2001 2:48 PM Subject: Re: [IMail Forum] OT: But Topical (Anti Virus) > > >Just to update you Symantec do NOT currently have a fix for the new Aliz > >Virus. They said the are currently working on it but as it is thanks giving > >in the States it won't be ready until some time tomorrow. > > afaics, it is still an attachment, whatever.exe, which we block at IMGate > without needing an AV scanner, and we also catch it in IMGateAV with > Kaspersky AV scanner, but that never sees the .exe's at all. > > Len > > > http://MenAndMice.com/DNS-training > http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K > http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > ********************************************************************** Information in this mail is confidential and intended only for the use of the individual or entity named above. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. Montague L Meyer Ltd will accept no responsibility or liability in respect to this email other than to the addressee. If you have received this email in error, please notify MLM by telephone on 0208 4778000 or by email on [EMAIL PROTECTED] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
