Myparty Strangeness

Quentin Campbell Q.G.Campbell at NEWCASTLE.AC.UK
Wed Jan 30 12:19:43 GMT 2002


Nick

I wonder if the problem lies with the particular ".DAT" file used by
uvscan?

The MyParty virus signature is not recognised by any NAI ".DAT" files
prior to 4184, due out on 30/1/2002. You need a special "extras" .DAT
file from them to recognise this virus until 4184 is released.

You can send a test message to me as we run MailScanner with uvscan.

Quentin
---
PHONE: +44 191 222 8209    Computing Service, University of Newcastle
FAX:   +44 191 222 8765    Newcastle upon Tyne, United Kingdom, NE1 7RU.
------------------------------------------------------------------------
"Any opinion expressed above is mine. The University can get its own."  

> -----Original Message-----
> From: Nick Phillips [mailto:nwp at LEMON-COMPUTING.COM] 
> Sent: 30 January 2002 12:12
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Myparty Strangeness
> 
> 
> On Tue, Jan 29, 2002 at 08:18:55PM -0500, Alex Short wrote:
> 
> > When someone sends me myparty, it changes myparty.yahoo.com 
> whichever 
> > to AB283.dat or something along those lines.  It doesn't detect any 
> > type of virus either, but if i save AB283.dat then scan it, its 
> > myparty.
> 
> I've sent Alex the EICAR.COM test "virus" uuencoded in the 
> body of the message to see whether that gets detected. Maybe 
> uvscan just doesn't pick up on uuencoded stuff embedded in 
> plain text - anybody else with uvscan care to try it?
> --
> Nick Phillips -- nwp at lemon-computing.com
> Excellent day for putting Slinkies on an escalator.
> 



More information about the MailScanner mailing list