F-prot & Frethem Virus

Joan Bryan joan.bryan at KCL.AC.UK
Thu Jul 18 14:06:01 IST 2002


FYI

You can stop the Frethem Virus with mailscanner by adding

deny    decrypt-password.exe$   "Frethem" virus
                                "Frethem" virus

to filename.rules.conf


Joan

On Thu, 18 Jul 2002 11:14:08 +0100 Julian Field
<mailscanner at ECS.SOTON.AC.UK> wrote:

> At 10:10 18/07/2002, you wrote:
> >Hi to everybody,
> >
> >Does anyone using f-prot 3.12 can do an "f-prot -virlist | grep -i
> >Frethem" please ?
> >
> >Because I have the most updated signature files, but they doesn't seem to
> >be aware of the Frethem virus :-/
> >
> >Or maybe it is shown with other codename ? I don't know ... just worried
> >about that, because this worm is currently on the wild.
> >
> >Does it happens to anyone else ?
>
> Yes.
> --
> Julian Field                Teaching Systems Manager
> jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
> Tel. 023 8059 2817          University of Southampton
>                              Southampton SO17 1BJ

----------------------
Joan Bryan
joan.bryan at kcl.ac.uk



More information about the MailScanner mailing list