Tomasz Papszun wrote:
On Tue, 20 Jul 2004 at 14:31:03 -0400, henry j. mason wrote:
---snip---
has anyone else encountered this? i can easily see a poorly
written virus sending out botched copies of itself.
That's right. We got many samples of messages generated by
Worm.Bagle.AF.2 containing empty (0 B) zip files.
so, i'm correct in assuming that clamav is behaving
correctly in passing these messages, right? i can't
think of any reasonable way to stop them, as they
seem to follow the Bagle pattern of using many different
patterns for the message and attachment filenames.
thanks,
henry
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users