ANNOUNCE: 4.29.2 released for Bagle.Q

[David Hooton]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Julian Field
> Sent: Thursday, 18 March 2004 10:38 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: ANNOUNCE: 4.29.2 released for Bagle.Q
>
> Morning all,
>
> With the release of this new (beta) version, MailScanner now detects the
> <Object Data=...> HTML tags used by the Bagle.Q worm.

Thanks Julian!

Also just in from the Clamav-VirusDB list:

Submission: 2032
Sender: webdigger
Submitted virus name: Unknown Virus
Virus name: Exploit.HTML.Bagle.Q-eml
Notes: Worm.Bagle.Q has the ability to distribute through
Notes: an e-mail with a HTML exploit (and no binary
Notes: attachment). This signature will detect these e-mails.
Added: Yes

So ClamAV with current definitions will catch the emails not just the binary
- Yet another highly responsive Open Source project :)

Cheers!

Dave


========================================================================
 Pain free spam & virus protection by:          www.mailsecurity.net.au
 Forward undetected SPAM to:                   spam at mailsecurity.net.au
========================================================================