RE: [clamav-users] FortNight virus

2003-06-05 Thread Shayne Lebrun
Fajar Arief Nugraha [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 05, 2003 5:55 AM > To: [EMAIL PROTECTED] > Subject: Re: [clamav-users] FortNight virus > > > I sent it to [EMAIL PROTECTED] > > You could also see it here : > > http://antispam.or.id/fortnight.eml >

RE: [clamav-users] FortNight virus

2003-06-05 Thread Diego d'Ambra
eight=3D0> If you already reported this, I'm it will be added. Best regards, Diego d'Ambra -Original Message- From: Fajar Arief Nugraha [mailto:[EMAIL PROTECTED] Sent: 5. juni 2003 11:55 To: [EMAIL PROTECTED] Subject: Re: [clamav-users] FortNight virus I sent it to [EMAIL PR

Re: [clamav-users] FortNight virus

2003-06-05 Thread Fajar Arief Nugraha
I sent it to [EMAIL PROTECTED] You could also see it here : http://antispam.or.id/fortnight.eml Diego d'Ambra wrote: Could you drop me a mail sample - I will then take a look at it. Please upload the sample to a web-site to prevent other scanners from stopping your mail. Best regards, Diego d'A

RE: [clamav-users] FortNight virus

2003-06-05 Thread Diego d'Ambra
juni 2003 11:09 To: [EMAIL PROTECTED] Subject: Re: [clamav-users] FortNight virus I'm using exim+exiscan-acl+clamav, with demime on, which would feed Clam with a directory containing orignal mail, decoded message (I think), and all attachments. Could it be that different FortNight variant

Re: [clamav-users] FortNight virus

2003-06-05 Thread Fajar Arief Nugraha
I'm using exim+exiscan-acl+clamav, with demime on, which would feed Clam with a directory containing orignal mail, decoded message (I think), and all attachments. Could it be that different FortNight variants connects to different URLS? That would make the pattern different too, right? Diego d'

RE: [clamav-users] FortNight virus

2003-06-05 Thread Diego d'Ambra
r Arief Nugraha [mailto:[EMAIL PROTECTED] Sent: 5. juni 2003 10:00 To: [EMAIL PROTECTED] Subject: Re: [clamav-users] FortNight virus Nope. Email still gets thru. Database was updated. Sent sample to [EMAIL PROTECTED] bash-2.03# grep -i fortnight viruses.db Exploit.F

Re: [clamav-users] FortNight virus

2003-06-05 Thread Nicholas Chua
Well, I have the same problem too. Symantec Email Proxy deleted the following email message: From: "Diego d'Ambra" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: RE: [clamav-users] FortNight virus I got this reply from norton after i enable email scanning immedi

Re: [clamav-users] FortNight virus

2003-06-05 Thread Fajar Arief Nugraha
Nope. Email still gets thru. Database was updated. Sent sample to [EMAIL PROTECTED] bash-2.03# grep -i fortnight viruses.db Exploit.FortNight (Clam)=3c4449563e3c494652414d45207372633d334422687474703a2f2f772e70726f73746f6c2e636f6d2f6d2e68746d6c222077696474683d3344303d3230 JS.FortNight.E (Cla

RE: [clamav-users] FortNight virus

2003-06-05 Thread Diego d'Ambra
nt: 5. juni 2003 08:05 To: [EMAIL PROTECTED] Subject: [clamav-users] FortNight virus Hi, I know clamav supposed to know FortNight (http://www.sarc.com/avcenter/cgi-bin/virauto.cgi?vid=27893) virus already : bash-2.03# cat viruses.db|grep -i fortnight Exploit.FortNight

[clamav-users] FortNight virus

2003-06-05 Thread Fajar Arief Nugraha
Hi, I know clamav supposed to know FortNight (http://www.sarc.com/avcenter/cgi-bin/virauto.cgi?vid=27893) virus already : bash-2.03# cat viruses.db|grep -i fortnight Exploit.FortNight (Clam)=3c4449563e3c494652414d45207372633d334422687474703a2f2f772e70726f73746f6c2e636f6d2f6d2e68746d6c222077