I have yet to see any AV pickup Bagle.J. I've tried Norton, Trend, F-Prot,
McAffee and Vexira with no success.
Randy
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Wednesday, March 03, 2004 11:35 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] New virus Bagle.J can't be caught by some
standard virus scanners
>I definately have the zip file with the password and Trend's email
>antivirus does catch it as well as their enterprise desktop protection,
>Officescan.
You haven't provided enough information to determine whether you are just
as confused as everyone else, or whether you know what you are doing and
have determined something very useful to know.
Specifically, YOUR (and everyone else's) mailserver AV program will detect
"static" viruses in encrypted .ZIP files. They will also all detect any
encrypted viruses after they have been decrypted manually. They will also
all detect viruses such as Bagle.J that appear in both non-encrypted files
and in encrypted files, but will *only* detect them in the non-encrypted
files.
If you proof of a mailserver AV program catching a non-static virus (such
as Bagle.J) in an encrypted .ZIP file, this would be news indeed. However,
you would need to check the CRCs of the files within the .ZIP files to make
sure that they are not the same.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
