Silent virus list

[Martin Sapsed]

Raymond Dijkxhoorn wrote:
> Another one for the silent list ...
>
> At Thu Sep 18 20:03:07 2003 the virus scanner said:
>    F-Prot: Q143675.exe  Infection: W32/Swen.A at mm
>    ClamAV: Q143675.exe contains Worm.Gibe.F
>    MailScanner: Executable DOS/Windows programs are dangerous in email (Q143675.exe)
>
> See:
>
> http://www.f-secure.com/v-descs/swen.shtml

Are you sure this should be on the silent list? From what I can see of
the copies we've caught, the envelope From address is related to the
first mail server that the message goes through. Earlier flavours of
Gibe haven't forged the envelope address either as far as I can see...?

Cheers,

Martin

--
Martin Sapsed
Information Services               "Who do you say I am?"
University of Wales, Bangor             Jesus of Nazareth