I can send you the body of an infected email if you are interested to see one
Les. ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 22, 2001 3:34 PM Subject: Re: [IMail Forum] OT: But Topical (Anti Virus) > > > > >Just to update you Symantec do NOT currently have a fix for the new Aliz > > > >Virus. > > >I think that because the virus uses it's own SMTP program the NAV software > >does not detect that it is an attachment. > > I'm not sure the reason for the Aliz virus, but that's exactly what > happened with NAVIEG and the Sircam virus. Its headers were "broken" > (after the virus attachment, it was missing the "end of MIME segments" > line). That's why it is especially important for an AV program not to use > an off-the-shelf MIME decoder. An off-the-shelf component may be OK for > some applications that do not need to be able to see an attachment from an > E-mail that isn't formatted properly, but an AV program definitely needs to > be able to see the attachment, even if there are problems with the > formatting or whatever. If a single E-mail client can read the attachment, > the virus scanner should too. > > -Scott > --- > Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for > IMail. http://www.declude.com > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > ********************************************************************** Information in this mail is confidential and intended only for the use of the individual or entity named above. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. Montague L Meyer Ltd will accept no responsibility or liability in respect to this email other than to the addressee. If you have received this email in error, please notify MLM by telephone on 0208 4778000 or by email on [EMAIL PROTECTED] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
