wendy.zip - encrypted - mimail

[shrek-m at gmx.de]

Martin Hepworth wrote:

> shrek-m at gmx.de wrote:
>
>> http://www.sophos.com/virusinfo/analyses/w32mimaill.html
>
> Sophos are calling this MiMail-L
>
> http://www.sophos.com/virusinfo/analyses/w32mimaill.html
>
> and claim to detect it since 2 Dec 04.17.
>
> I guess if not let their support dept know...


done,
together with my email to this list.

apropos, mimail-l was detected without problems but not mimail-m
http://www.sophos.com/virusinfo/analyses/w32mimailm.html

mimail-m will be recogniced since *today*


$ sweep -archive -mime /data4/doku/viren/mimail/

Password protected file
/data4/doku/viren/mimail/wendy-encrypted.eml/wendy.zip/wendy.exe
 >>> Virus 'W32/Mimail-M' found in file
/data4/doku/viren/mimail/wendy-encrypted.eml/wendy.zip
Password protected file /data4/doku/viren/mimail/wendy.zip/wendy.exe
 >>> Virus 'W32/Mimail-M' found in file /data4/doku/viren/mimail/wendy.zip

2 files swept in 1 second.
2 errors were encountered.
2 viruses were discovered.
2 files out of 2 were infected.

--
shrek-m