On Fri, 2004-03-05 at 09:34, Franck wrote: > Tomasz Kojm wrote: > > > Submission: n/a > > Sender: Diego d'Ambra > > Virus name: Worm.Bagle.Gen-zippwd > > Notes: Generic signature to detect password-protected Bagle zip files > > The signature matches encrypted zip files. > > Does this mean you want submissions of encrypted zip archives if they > aren't getting caught? > 'Cause I'm getting hit by what Symantec identifies as Bagle.J in > encrypted archives that have slipped by Clam even with the newest > updates. >
Yes, you can send those to me if you still have them. Preferably as complete email messages. Cheers, -trog
signature.asc
Description: This is a digitally signed message part