Fwd: Anti Virus Software (Something Found)

2005-08-07 Thread Adam Lippiatt

Hi

I downloaded and used this software and found (amongst other things) a:

Worm.Bagle.Gen-zippwd

in my mbox file in the inbox.

Does anyone know what the mbox file is and is it safe to remove it  
(it seems to appear in most other mailboxes)?


Thanks

Adam

Begin forwarded message:


From: subscribe [EMAIL PROTECTED]
Date: 7 August 2005 10:01:26 AM
To: WAMUG Mailing List wamug@wamug.org.au
Subject: Re: Anti Virus Software


Hello Steven,

i have recently moved over to ClamAV and found it to work well and  
to be a fine replacement for products like virex, there was  
recently a problem found with part of ClamAV  that caused Multiple  
Integer Overflow Vulnerabilities however this has been patched -  
http://secunia.com/advisories/16250/


overall i'm pretty happy with ClamAV, one of my primary reasons for  
moving to it  apart from cost was the rumourmill from sophos  
regarding viri for OS X
 it would appear that they dont know a virus from a root exploit,  
which concerns me. Also the ClamAV developers have proved that they  
are on top of problems that occur with ClamAV and are proactive  
with there fixes


cheers

Natas
On 06/08/2005, at 9:42 PM, Stephen Chape wrote:



Hi folks,

I know this must sound a bit paranoid  but  well  you  
just never know.
I have Virex installed but my .Mac membership expired about 3  
months ago.

I don't think the updates work any more because of this ??
Is this correct ? I can't see any way of actually checking.

I noticed someone recently recommending ClamXav.
I have downloaded it but have not yet installed it.
Would this be a good replacement for Virex ?
Or (if Virex still woks) a I better off staying with Virex ?

Regards,
Stephen Chape


-- The WA Macintosh User Group Mailing List --
Archives - http://www.wamug.org.au/mailinglist/archives.shtml
Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml
Unsubscribe - mailto:[EMAIL PROTECTED]

WAMUG is powered by Stalker CommuniGatePro




-- The WA Macintosh User Group Mailing List --
Archives - http://www.wamug.org.au/mailinglist/archives.shtml
Guidelines - http://www.wamug.org.au/mailinglist/guidelines.shtml
Unsubscribe - mailto:[EMAIL PROTECTED]

WAMUG is powered by Stalker CommuniGatePro






Re: Fwd: Anti Virus Software (Something Found)

2005-08-07 Thread Onno Benschop

Adam Lippiatt wrote:


Hi

I downloaded and used this software and found (amongst other things) a:

Worm.Bagle.Gen-zippwd

in my mbox file in the inbox.

Does anyone know what the mbox file is and is it safe to remove it  
(it seems to appear in most other mailboxes)?


Thanks

Adam

The file is likely part of an email attachment inside your mail folder. 
You should not delete the mbox because it contains all your mail in that 
folder. A smarter solution is to create a new mail folder, move the 
message to there, then purge your mail folders, then scan again. The 
attachment will now have moved to another file which only has that one 
message inside it.


I should also point out that having a windows virus sitting inside an 
email file won't actually do anything until you save it and open it 
inside Windows, either by transferring it to a Windows machine, or by 
launching a Windows emulator.


In short, you really don't need to worry too much about this particular one.

--
Onno Benschop

Connected via Optus B3 at S34°45'36.5 - E139°00'08.7 (Mount Pleasant, SA)
--
()/)/)()..ASCII for Onno..
|?..EBCDIC for Onno..
--- -. -. ---   ..Morse for Onno..

Proudly supported by Skipper Trucks, Highway1, Concept AV, Sony Central, Dalcon
ITmaze   -   ABN: 56 178 057 063   -  ph: 04 1219    -   [EMAIL PROTECTED]