Recently in the last few days my mail server has caught
several Netsky viruses. The problem is my on access virus scanner is catching
these and not F-Prot. In the past I have seen F-Prot catch these but Symantec
catches one particular variation of Netsky I think before F-prot scans it. I
Will be out all of next week (6/26-6/30, 7/3). I will be returning on July
5th.
In my absence please see John Hardy or John Hultgren for any
network/email/internet issues.
For any other issues or like GMI issues please see Cathy Frank.
---
This E-mail came from the Declude.Virus
Some of us has noted in the past two hours that messages with an zip-file as
attachment has passed our virus filters
It's a zip-file containing a MS Word Document named my_notebook.doc
Most Virus-Scanners can't catch it. Virustotal has returned only two
scanners with positive results
Sophos has
Mcafee is catching these Trojan.Myno on my systems.
Darrell
---
Check out http://www.invariantsystems.com for utilities for Declude, Imail,
mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log
Actually, it is CLAMAV catching it. Not sure about McAfee as I stop on
first virus. F-Prot is def. not catching it though.
Darrell
Darrell ([EMAIL PROTECTED]) writes:
Mcafee is catching these Trojan.Myno on my systems.
Darrell
---
Check out
http://www.f-secure.com/weblog/archives/archive-062006.html#0909
The writeup is interesting in the follow-on details but the information
that Markus posted earlier is more helpful to us in keeping the darn
thing out of users' mailboxes.
Andrew 8)
-Original Message-
From: [EMAIL
Is the word document only named that?
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus
Gufler
Sent: Tuesday, June 27, 2006 11:32 AM
To: declude.virus@declude.com
Subject: [Declude.Virus] New
As I know yes but
BANNAME my_notebook.doc
wouldn't work for files within zip-archives.
Markus
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of John T (Lists)
Sent: Tuesday, June 27, 2006 11:48 PM
To: declude.virus@declude.com
Subject: RE:
I know. :(
Declude, this is a feature who's time has come.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus
Gufler
Sent: Tuesday, June 27, 2006 3:10 PM
To: declude.virus@declude.com
JT Declude, this is a feature who's time has come.
Hear, hear! The ability to ban filenames that are contained in archives
would be a good feature, and most of the code must be in place, because
Declude Virus already pulls apart at least the zip file format for
selective file scanning.
It is
John,
Not to say that this wouldn't be something that is nice to have, I can
think of dozens of things that are very largely useful on a much more
regular basis. In fact, the current functionality provides an
appropriate mechanism for blocking these as-is.
I would just simply like to see
11 matches
Mail list logo
