I've caught it 9 times today so far, one of the variants that is, not the encrypted with password
declude/f-prot Andy ----- Original Message ----- From: "Randall Scott" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, March 03, 2004 12:47 PM Subject: RE: [IMail Forum] New virus Bagle.J can't be caught by some standard virus scanners > I have yet to see any AV pickup Bagle.J. I've tried Norton, Trend, F-Prot, > McAffee and Vexira with no success. > > Randy > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry > Sent: Wednesday, March 03, 2004 11:35 AM > To: [EMAIL PROTECTED] > Subject: Re: [IMail Forum] New virus Bagle.J can't be caught by some > standard virus scanners > > > > >I definately have the zip file with the password and Trend's email > >antivirus does catch it as well as their enterprise desktop protection, > >Officescan. > > You haven't provided enough information to determine whether you are just > as confused as everyone else, or whether you know what you are doing and > have determined something very useful to know. > > Specifically, YOUR (and everyone else's) mailserver AV program will detect > "static" viruses in encrypted .ZIP files. They will also all detect any > encrypted viruses after they have been decrypted manually. They will also > all detect viruses such as Bagle.J that appear in both non-encrypted files > and in encrypted files, but will *only* detect them in the non-encrypted > files. > > If you proof of a mailserver AV program catching a non-static virus (such > as Bagle.J) in an encrypted .ZIP file, this would be news indeed. However, > you would need to check the CRCs of the files within the .ZIP files to make > sure that they are not the same. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
