Worm.VB-8 not detected by filename or filetype

Nerijus Baliunas nerijus at users.sourceforge.net
Wed Jan 18 19:01:19 GMT 2006


On Wed, 18 Jan 2006 11:19:58 +0200 (CAT) Jim Holland <mailscanner at mango.zw> wrote:

> The problem therefore is that the messages themselves are still getting 
> through.  For the moment I am blocking the following extensions:
> 
> 	.bhx
> 	.b64
> 	.hqx
> 	.uu
> 	.uue
> 
> I presume that a user would have to manually decode these files before 
> running the executable within, so infection is not likely to be very 
> common.

IIRC Winzip decodes them automatically.

Regards,
Nerijus


More information about the MailScanner mailing list