anomy-list

Re: Re: zip files from W32/Mydoom@MM

From: Thomas von Hassel (111665@xyz.molar.is)
Date: Tue 27 Jan 2004 - 17:37:39 GMT

  • Next message: Rick Johnson: "Re: Re: zip files from W32/Mydoom@MM"

    On 27/1-2004, at 18.29, Rick Johnson wrote:

    > Thomas von Hassel wrote:
    >>>> is it just me or does the zip files from W32/Mydoom@MM slip through
    >>>> anomy ?
    >>>
    >>> Almost certainly, unless you have a virus scanner plugged in.
    >>>
    >>> ZIP files are generally on the list of allowed file types, so this
    >>> is to be expected.
    >>
    >>
    >> i have uvscan plugged in and set zip files to be scanned ...but it now
    >> seems that uvscan isn't recognising them when they are zip files ...
    >
    > You need the 4139 DAT. I had to download their daily untested yesterday
    > in order to "catch" the virus. 4139 was released last night, which
    > appears to be catching it.
    >
    > Fortunately, SpamAssassin's baysean filter caught on soon enough, and
    > at
    > least flagged a good portion as spam which should help deter any users
    > which got the attachment before I was able to update my DAT's myself.
    >

    hmm, wierd, i've got 4139 and a couple of *.zip files i fed through
    uvscan came back negative ...

    /thomas

    Attachments:
     + http://mailtools.anomy.net/archives/anomy-list//80/74/016a1f9/01.smime.p7s



    hosted by molar.is