On Saturday, May 24, 2003 9:27 PM, Sean Rima wrote:
> > I just got a copy of the virus mentioned in the subject. Clamscan
> > did not see it. Will I send a copy somewhere?
>
> On this I uploaded the whole email to
> http://tcob1.uklinux.net/W32Gibe.rar and will leave it there for a day
> or two

q169886.exe: Worm.Gibe.B FOUND

If you're depending on Clamscan to decode the MIME message, then it
won't find the virus. Using a tool like reformime or ripmime to decode
the mail, THEN scanning the actual attachments, WILL work.


--
Jay Swackhamer <[EMAIL PROTECTED]>
Nebularis Inc <http://www.nebularis.com>
Tel: 1-613-843-9358  Fax: 1-613-825-5960


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Reply via email to