Sobig.E Getting Through Intermittently

Raymond Dijkxhoorn raymond at PROLOCATION.NET
Thu Jun 26 17:44:45 IST 2003


Hi!

> We have been intermittent copies of Sobig.E getting through MailScanner
> w/ F-prot. The virus is inside a zip file called "your
> details.zi)--notice that renamed extension. The file squeezed through
> and it's apparently related to the format of the message as it passed
> through Sendmail. Please see the log excerpt below. I broke out the

I have opened a case for this with FRISK last night (f-prot) its fixed in
the DEF files they released later that day. So currently its detected.

Bye,
Raymond



More information about the MailScanner mailing list