I apologies for creating more work for the clamav virus listers. It is encrypted but I can see the archive with unzip -l and winzip, I just can't unzip it without the password.
Sigh... So how does Trend's pc-cillian detect it in the password protected zip file?
Rick
Trog wrote:
On Wed, 2004-03-03 at 14:32, Rick Macdougall wrote:
Hi All,
We are getting hammered by Worm.Bagle.F-zippwd-3 and clamav isn't picking it up.
I understand that qmail-scanner breaks apart the message so that clamav can not pick up the signature (and I'll look into fixing that) but the zip file itself is NOT password protected. Winzip and unzip on Linux can unzip the file without a problem.
Is this something I should submit to the team to get a signature added?
I have the full email message, the actual zip and the unzipped .exe if needed.
If what you say is correct, then yes, submit it.
You can send the email to me in a passworded zip if you want a second opinion (password of 'virus')
-trog
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
