wendy.zip - encrypted - mimail

[Martin Hepworth]

shrek-m at gmx.de wrote:
> hi,
> 
> ms and sweep don´t recognize wendy.zip as mimail because it is encrypted,
> it should be blocked via filename/filetype
> 
> http://www.sophos.com/virusinfo/analyses/w32mimaill.html
> 
> 
> $ ll wendy.zip
> -rw-------    1 admin    admin        9903 Dec  4 08:02 wendy.zip
> $ md5sum wendy.zip
> 18aa642a0b7f275a51e31fe02d82ba35  /data4/doku/viren/wendy.zip
> 
> 
> 
> $ sweep -archive wendy.zip
> [...]
> Password protected file wendy.zip/wendy.exe
> 
> 1 file swept in 1 second.
> 1 error was encountered.
> No viruses were discovered.
> 1 encrypted file was not checked.
> 
> 

Hi

Sophos are calling this MiMail-L

http://www.sophos.com/virusinfo/analyses/w32mimaill.html

and claim to detect it since 2 Dec 04.17.

I guess if not let their support dept know...
-- 
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************