Scott,
I just had a user send me an email with all the signes of Bagle in it.
Password zip and all.
It came right throught to the user and then it was forwared to me.
When I try to extract the zip on a test system I get invaild archive
format.
I am running declude 1.78i20 just updated Sophos and
invalid archive format says to me that it may be a corrupted/incomplete copy of the
virus.
If that's the case, inconsistent identification would be normal.
Sending a copy of the zip to [EMAIL PROTECTED] would let Scott have more info.
Greg Little
EMail Admin wrote:
Scott,
I just had a user
That's the problem. Most likely, it wasn't a valid .ZIP file, which
prevents Declude Virus from telling that it was password protected, and
prevents it from being extracted.
Kind thought it was a corrupted/incomplete copy of the virus as Greg
stated or some other type of archive PicoZip can
