An interesting note, the readme. zip file previously detected and blocked as the bagle.J is now being detected, in the same encrypted form, as bagle.GEN-1 by Trend's mail gateway and enterprise desktop protection.
Douglas Traylor MIS Department Harbison-Fischer Mfg Co. (817)297-2211 x210 ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, March 03, 2004 11:34 AM Subject: Re: [IMail Forum] New virus Bagle.J can't be caught by some standard virus scanners > > >I definately have the zip file with the password and Trend's email > >antivirus does catch it as well as their enterprise desktop protection, > >Officescan. > > You haven't provided enough information to determine whether you are just > as confused as everyone else, or whether you know what you are doing and > have determined something very useful to know. > > Specifically, YOUR (and everyone else's) mailserver AV program will detect > "static" viruses in encrypted .ZIP files. They will also all detect any > encrypted viruses after they have been decrypted manually. They will also > all detect viruses such as Bagle.J that appear in both non-encrypted files > and in encrypted files, but will *only* detect them in the non-encrypted files. > > If you proof of a mailserver AV program catching a non-static virus (such > as Bagle.J) in an encrypted .ZIP file, this would be news indeed. However, > you would need to check the CRCs of the files within the .ZIP files to make > sure that they are not the same. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
