Hance, I said block - didn't I?
Travis > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Randall Scott > Sent: Wednesday, March 03, 2004 7:29 AM > To: [EMAIL PROTECTED] > Subject: RE: [IMail Forum] New virus Bagle.J can't be caught by standard > virus scanners > > > > > Blocking encrypted zips is only a temporary solution. > Symantec, like other > AV software cannot scan the encrypted file, so blocking is all we > can do at > this point. The vendor of your AV software is totally irrelevant in this > situation. > > Randy > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Travis Rabe > Sent: Wednesday, March 03, 2004 9:14 AM > To: [EMAIL PROTECTED] > Subject: RE: [IMail Forum] New virus Bagle.J can't be caught by standard > virus scanners > > > Symantec AV for SMTP Gateways will block or forward the encrypted > attachments per your choice. > > Travis > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry > > Sent: Wednesday, March 03, 2004 7:09 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [IMail Forum] New virus Bagle.J can't be caught by standard > > virus scanners > > > > > > > > >To be more clear, our antivirus gateway missed the email when > it arrived > > >since it had not been updated yet, but after the update I tested by > > >forwarding the email to myself and it was caught. > > > > Is this the one that says "Dear user of your_domain.com e-mail server > > gateway..." (or similar text)? > > > > When you tested forwarding it, was it still in the encrypted .ZIP > > file, or > > a decrypted one? > > > > As far as I know, no mailserver AV program is capable of > > detecting this new > > virus, nor will they be able to effectively block it in the future > > (although they will be able to detect it if you manually read the > > password > > from the E-mail and manually decrypt the .ZIP file attachment and > > send the > > decrypted version through the virus scanner). > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > > since 2000. > > Declude Virus: Catches known viruses and is the leader in mailserver > > vulnerability detection. > > Find out what you've been missing: Ask for a free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
