> > Hi list: > > In my Qmail server received a malicious code attachments, I do detect > kamsutra blackworms ([EMAIL PROTECTED],Nyxem-D, W32.VB Nei.8, etc). > View the last thread > http://www.theregister.com/2006/02/02/kama_sutra_final_warning/. > This worm has infected an estimated 600,000 machines, with the US, India > and > Peru having the greatest number of infected machines. I'am Peruvian, and > sense the impact, at incomming emails. > > Examining the attach, into emails to recipients, I can confirm the > mimetypes > for this malicious code : YmVnaW4gN > > ClamAv do not detected this worm at 2 weeks ago, but I dont know. > Recommend > read this http://isc.sans.org/diary.php?storyid=1067 > > Regards... >
Here is further info from Eweek: http://www.eweek.com/article2/0,1895,1917482,00.asp? I would certainly add YmVnaW4gN to badmimetypes and run: /var/qmail/bin/qmail-badmimetypes Regards, Nick --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
