> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Shawn Tayler > Sent: 4. marts 2004 05:59 > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Worm.Bagle.F-zippwd-5.. > > > The Worm.Bagle.F-zippwd-x detects e-mails infected with password > > protected zip files and it also detects some of the later variants. > > > I find it interesting that the msgs with the attached infected/encrypted > zip are detected but the actual zip files themselves are cleared... Is > there something I may be doing wrong, or are you simply using the msg text > contents? >
The signature matches text found in the body of the e-mail and the first and last part of the zip attachment (so you can say it's a combination). Best regards, Diego d'Ambra
smime.p7s
Description: S/MIME cryptographic signature
