MyDoom.O sneaking through!

[Dan Hollis]

On Wed, 4 Aug 2004, Chris Yuzik wrote:
> I'm running the latest version of MailScanner (just updated yesterday)
> and for some reason, MyDoom.O is occasionally getting through. According
> to my logs, in the last week, I've had 11,001 messages with MyDoom.O
> blocked...but I know that some of them are getting though because I had
> someone send me a zip file that they received today and the virus was
> completely intact and waltzed right through the system.

Looks like its a new mydoom variant where they doubly zip the virus. Eg
they zip the zipfile.

-Dan

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html