Re: [Clamav-users] Re: password-protected Worm.Bagle.H

2004-03-04 Thread Tomasz Papszun
On Thu, 04 Mar 2004 at 12:58:36 +0100, Andrzej Zawadzki wrote: > > Yes, I'm sorry but I did that today and after that I read this BIG > SIGN... :-( > Again - I'm sorry Well, "you're not alone" ;-) -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://w

RE: [Clamav-users] Re: password-protected Worm.Bagle.H

2004-03-04 Thread Randal, Phil
Tomasz Papszun wrote: > Detecting that a zip file is encrypted and rejecting it > (available only > since a very recent CVS version) isn't a good solution either as a > submitter can have a valid reason to encrypt some sample > intentionally. At least one antivirus company requires you to submi

Re: [Clamav-users] Re: password-protected Worm.Bagle.H

2004-03-04 Thread Andrzej Zawadzki
Tomasz Papszun wrote: On Thu, 04 Mar 2004 at 0:53:42 -0700, Starbane wrote: Erik Corry wrote: The question is how much of a problem it really is. Are users really that dumb? The sad answer to this question has so far been a resounding "Yes" in every scenario so far. :( Unfortunately, it's e

Re: [Clamav-users] Re: password-protected Worm.Bagle.H

2004-03-04 Thread Erik Corry
On Thu, Mar 04, 2004 at 12:35:55PM +0100, Tomasz Papszun wrote: > On Thu, 04 Mar 2004 at 12:08:57 +0100, Laurent Wacrenier wrote: > > Tomasz Papszun wrote: > > > Despite adding to the submission page (in BIG fontsize!) this request: > > > > > > "DO NOT SUBMIT naked zip files IF their contents is D

Re: [Clamav-users] Re: password-protected Worm.Bagle.H

2004-03-04 Thread Tomasz Papszun
On Thu, 04 Mar 2004 at 12:08:57 +0100, Laurent Wacrenier wrote: > Tomasz Papszun wrote: > > Despite adding to the submission page (in BIG fontsize!) this request: > > > > "DO NOT SUBMIT naked zip files IF their contents is DETECTED as infected > > by ClamAV AFTER UNZIPPING" > > > > they keep subm

Re: [Clamav-users] Re: password-protected Worm.Bagle.H

2004-03-04 Thread Laurent Wacrenier
Tomasz Papszun wrote: > Despite adding to the submission page (in BIG fontsize!) this request: > > "DO NOT SUBMIT naked zip files IF their contents is DETECTED as infected > by ClamAV AFTER UNZIPPING" > > they keep submitting these idiotic samples. You may change the virus submission CGI to make

Re: [Clamav-users] Re: password-protected Worm.Bagle.H

2004-03-04 Thread Tomasz Papszun
On Thu, 04 Mar 2004 at 0:53:42 -0700, Starbane wrote: > Erik Corry wrote: > >The question is how much of a problem it really is. Are users > >really that dumb? > > The sad answer to this question has so far been a resounding "Yes" in > every scenario so far. :( > Unfortunately, it's even wors

[Clamav-users] Re: password-protected Worm.Bagle.H

2004-03-04 Thread Starbane
Erik Corry wrote: The question is how much of a problem it really is. Are users really that dumb? The sad answer to this question has so far been a resounding "Yes" in every scenario so far. :( --- This SF.Net email is sponsored by: IBM Linux