Hi David,

Yes, it's the [EMAIL PROTECTED] worm (that just rolls off the tongue, doesn't
it? :)

Symantec report here:

http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]

The zip is a 22 Kb archive that includes a single file, the worm itself. The
zip file is delivered using multiple names (test.zip, doc.zip, etc.), and
the subject of the mail also changes. Assuming for a moment that one isn't
scanning viruses as part of the defanging process, is there an easy way of
blocking just these files and allowing other zip files through?

Cheers
Alastair

-----Original Message-----
From: David F. Skoll [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 27, 2004 1:58 PM
To: [EMAIL PROTECTED]
Subject: [Mimedefang] New .zip virus?


Hi,

I'm seeing bounces from messages I supposedly sent containing a .zip file.
I think there's a new .zip virus out there.  Watch out; the default filter
will not catch these.

Regards,

David.

--
David F. Skoll <[EMAIL PROTECTED]>    Roaring Penguin Software Inc.
+1 (613) 231-6599 ext. 100                 http://www.roaringpenguin.com/
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to