Well, you knew it had to happen: A password protected archive with the
virus including the password in the body of the {RANDOM} message. E-mail
virus scanners can't scan inside password-protected files. Now the user
gets it, and enters the password of course and promptly infects himself.
We're also trapping conventional unzipped Bagle.F viruses.
As an ISP, it will be hard to block all ZIP files or even just
password-protected ZIP files. We now need to be able to detect
password-protected zip files, hold them, notify the recipient, and allow
them to release the message.
Sample below without virus Bagle.F ---
-------------------------------------------
Sent: Sunday, February 29, 2004 7:04 PM
Subject: Bad girl
I am from Taiwan but I study in Camden, New Jersey now. I like to know
people from different places .
password for archive: 87326
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
