W32/Bagle-Zip

[Dan Williamson]

ClamAV is getting them.
I had .60 installed, it wasn't catching them, however after upgrading to .67
it is now catching them.

I would suggest adding a second virus scanner if you can.

regards,
-dan


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Ryan Pitt
Sent: March 4, 2004 10:48 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: W32/Bagle-Zip

Hirsh, Joshua wrote:

>Looks like Sophos is now matching against the passworded zip's for the
>Bagle
>strains:
>
>http://www.sophos.com/virusinfo/analyses/w32baglezip.html
>
>-Joshua
>

This baglezip ide was downloaded automatically, so I temporarily
*allowed*  .zip files to pass through MailScanner and sent a copy of Bagle-K
through and Sophos still does not detect it.
I'm not sure exactly what this definition is supposed to do thats different.
Still waiting for the next stable release of MailScanner to be released
before I upgrade.
I have gone back to *denying* all .zip files for the time being.

-Ryan Pitt


--
This message has been scanned for viruses and dangerous content by
MailScanner, and is believed to be clean.