I see some occurences of emails containing compressed attachment, not detected by ClamAV, all claiming to be
"automatically scanned for viruses using xxx" where xxx is either McAfee, Norton, or possibly other AV vendors, complete with their logo attached.
The attachments are not password-protected, but I can't open it with ark (perhaps this is winzip-only archive). A sample was submitted to http://www.nervous.it/~nervous/cgi-bin/sendvirus.cgi
As I don't use M$ Win, I don't know what it does exactly. Anybody else got these? Or perhaps some other vendor already detect this?
Regards,
Fajar
Fajar,
Sounds like a bagle variant. The attachment could be a RAR archive.
Niek
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
