RE: [Declude.Virus] New variant of zafi worm is forging and mutli-language

2004-06-11 Thread Markus Gufler

> >http://vil.nai.com/vil/content/v_126242.htm
> >
> >Please update the forging list to prevent false warnings.
> 
> Our forging virus database has now been updated to include Zafi


We've received back some wirus warnings send to the recipients because the
recipients name of the address was not walid (only the domain)
I'm not 100% sure but maybe it's better to disable any virus warning
regarding this worm.

BTW: in the last 30 minutes I've seen 14 Zafi's send from different IP's to
different recipients.

Have a nice weekend

Markus



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] New variant of zafi worm is forging and mutli-language

2004-06-11 Thread R. Scott Perry

http://vil.nai.com/vil/content/v_126242.htm
Please update the forging list to prevent false warnings.
Our forging virus database has now been updated to include Zafi
   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] New variant of zafi worm is forging and mutli-language

2004-06-11 Thread Markus Gufler

http://vil.nai.com/vil/content/v_126242.htm

Please update the forging list to prevent false warnings.

Markus



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.