I have noticed that too. We exclude the extension of .pif and .scr in both Declude and as a filter on Imail and viruses with the extensions, when not caught by declude, still come in. The only thing that I see is that the virus is coming in as base 64 encodeded so the file names don't seem to appear in the message. Any way of getting around that.
Steve -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jimm Wetherbee Sent: Tuesday, July 27, 2004 11:17 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] New Virus?? Perhaps, but one of our users received a message with an attachment whose extension (.scr) we exclude. --jimm -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug White Sent: Tuesday, July 27, 2004 1:03 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] New Virus?? Manually update your definitions. Most all the A/V vendors now identify these as the new MyDoom variant, introduced yesterday. ====================================== Our Anti-spam solution works!! http://www.clickdoug.com/mailfilter.cfm For hosting solutions http://www.clickdoug.com http://www.forta.com/cf/isp/isp.cfm?isp_id=1069 ====================================== ----- Original Message ----- From: "Travis Rabe" <[EMAIL PROTECTED]> To: "Imail User Forum" <[EMAIL PROTECTED]> Sent: Tuesday, July 27, 2004 11:44 AM Subject: [IMail Forum] New Virus?? : Hey There, : : Starting last night I received a few e-mail that came form : [EMAIL PROTECTED] and [EMAIL PROTECTED] with zip file attachments. : Within those attachments are .scr and .htm.exe files. Our SAVSMTP server : has the latest Symantec Definitions on them and it detected nothing. I then : scanned the attachments with McAfee's latest definitions, nothing. I then : did an online scan with Trend Micro - nothing. Are these new or are these : just so mangled that they aren't being detected? I have since sent them to : Symantec for review, but it seems a bit odd that I would get so many and the : three different AV companies would not be able to detect them. These are : not password protected zip files. For the time being I just stopped : accepting .zip attachments. : : Any ideas? : : ---------------------------------------- : Travis Rabe : The Davidson Group : Technology Director : Work: (775) 832-8314 x108 : Cell: (775) 250-6526 : [EMAIL PROTECTED] : : : : : To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html : List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ : Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ : : To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude AntiVirus] --- [This E-mail scanned for viruses by Declude AntiVirus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
