McAfee PROBLEM !!!

[Michael Baird]

Good Question, Does DAT 4332 fix it, my understanding was that it
handled the unzipping and so forth, and MailScanner interpreted the
response, I'm looking for confirmation, I'm running an older version of
MailScanner (4.25-14 I believe), I hate to upgrade unless it's
necessary.

Regards
MIKE

> Does DAT 4332 fix it?
> 
> Phil
> ---------------------------------------------
> Phil Randal
> Network Engineer
> Herefordshire Council
> Hereford, UK 
> 
> > -----Original Message-----
> > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > Behalf Of Desai, Jason
> > Sent: 02 March 2004 20:56
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: McAfee PROBLEM !!!
> > 
> > 
> > Thanks for this info - it was very helpful!  I have the same results.
> > 
> > Jason
> > 
> > > -----Original Message-----
> > > From: Denis Beauchemin [mailto:Denis.Beauchemin at USHERBROOKE.CA] 
> > > Sent: Tuesday, March 02, 2004 2:09 PM
> > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > Subject: [MAILSCANNER] McAfee PROBLEM !!!
> > > 
> > > 
> > > Hi,
> > > 
> > > We installed the extra.dat this morning and it was catching some
> > > W32/Bagle.gen!pwdzip (ED) with dat 4330.
> > > 
> > > Now that dat 4331 is out the same files are not detected as viruses
> > > anymore!!!
> > > 
> > > I reinstalled the extra.dat to be sure they are detected.
> > > 
> > > Scan with 4331:
> > > # uvscan --mime --mailbox --secure *
> > > /quarantaine/usherbrooke/20040302/i22HBCOJ000853/Document.zip/
> > > WBJAMVF.SCR
> > >         is password-protected.
> > > /quarantaine/usherbrooke/20040302/i22HBCOJ000853/message/Docum
> > > ent.zip/WBJAMVF.SCR
> > >         is password-protected.
> > > 
> > > Scan with 4331 and extra.dat:
> > > # uvscan --mime --mailbox --secure *
> > > /quarantaine/usherbrooke/20040302/i22HBCOJ000853/Document.zip
> > >         Found the W32/Bagle.gen!pwdzip (ED) virus !!!
> > > 
> > /quarantaine/usherbrooke/20040302/i22HBCOJ000853/message/Document.zip
> > >         Found the W32/Bagle.gen!pwdzip (ED) virus !!!
> > > 
> > > Denis
> > > -- 
> > > Denis Beauchemin, analyste
> > > Université de Sherbrooke, S.T.I.
> > > T: 819.821.8000x2252 F: 819.821.8045
> > > 
> > 
>