Re: [Clamav-users] Worm.Bagle.F-zippwd-3 problems

2004-03-03 Thread Tomasz Papszun
On Wed, 03 Mar 2004 at 15:59:12 +0100, Thomas Lamy wrote: > Rick Macdougall schrieb: > > >I have the full email message, the actual zip and the unzipped .exe if > >needed. > > > submit them with some notes on > http://www.nervous.it/~nervous/cgi-bin/sendvirus.cgi ??? The full email message itse

Re: [Clamav-users] Worm.Bagle.F-zippwd-3 problems

2004-03-03 Thread Rick Macdougall
Hello, I apologies for creating more work for the clamav virus listers. It is encrypted but I can see the archive with unzip -l and winzip, I just can't unzip it without the password. Sigh... So how does Trend's pc-cillian detect it in the password protected zip file? Rick Trog wrote: On W

Re: [Clamav-users] Worm.Bagle.F-zippwd-3 problems

2004-03-03 Thread Thomas Lamy
Rick Macdougall schrieb: Hi All, We are getting hammered by Worm.Bagle.F-zippwd-3 and clamav isn't picking it up. I understand that qmail-scanner breaks apart the message so that clamav can not pick up the signature (and I'll look into fixing that) but the zip file itself is NOT password prot

[Clamav-users] Worm.Bagle.F-zippwd-3 problems

2004-03-03 Thread Rick Macdougall
Hi All, We are getting hammered by Worm.Bagle.F-zippwd-3 and clamav isn't picking it up. I understand that qmail-scanner breaks apart the message so that clamav can not pick up the signature (and I'll look into fixing that) but the zip file itself is NOT password protected. Winzip and unzip o