nanog mailing list archives

Re: Nothing like viruses with bugs in them (Swen)


From: "Mr. James W. Laferriere" <babydr () baby-dragons com>
Date: Fri, 19 Sep 2003 13:07:05 -0400 (EDT)


        Hello All ,

On Fri, 19 Sep 2003, Brian Bruns wrote:
These are exim filters which catch the damn thing when the antivirus
software misses it.  Hopefully it might be useful.  It was taken from
http://pkierski.republika.pl/filtry.shtml.
...snipped nice exim filters...
        Is there an example of a procmail filter for this bugger ?
                Tia ,  JimL

----- Original Message -----
From: "Mark Radabaugh" <mark () amplex net>
To: <nanog () merit edu>
Sent: Friday, September 19, 2003 12:03 PM
Subject: Nothing like viruses with bugs in them (Swen)
Seems like this virus/worm has a bug where it will occasionally send out 1
byte attachments rather than the correct worm payload.   Since the virus
is
not truly attached it tends to pass through e-mail virus scanners.
It's causing a fair amount of end user confusion today -- lots of 'why is
your/my virus scanner not working?' questions.
-- 
       +------------------------------------------------------------------+
       | James   W.   Laferriere | System    Techniques | Give me VMS     |
       | Network        Engineer |     P.O. Box 854     |  Give me Linux  |
       | babydr () baby-dragons com | Coudersport PA 16915 |   only  on  AXP |
       +------------------------------------------------------------------+


Current thread: