Sobig.E Getting Through Intermittently

[Nathan Johanson]

I checked. Looks like I'm current with the defs. That would explain why
I haven't seen it since yesterday. Thanks for the note.
-Nathan

-----Original Message-----
From: Raymond Dijkxhoorn [mailto:raymond at PROLOCATION.NET] 
Sent: Thursday, June 26, 2003 9:45 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Sobig.E Getting Through Intermittently


Hi!

> We have been intermittent copies of Sobig.E getting through
MailScanner
> w/ F-prot. The virus is inside a zip file called "your
> details.zi)--notice that renamed extension. The file squeezed through
> and it's apparently related to the format of the message as it passed
> through Sendmail. Please see the log excerpt below. I broke out the

I have opened a case for this with FRISK last night (f-prot) its fixed
in
the DEF files they released later that day. So currently its detected.

Bye,
Raymond