[Qmail-scanner-general]adding "Bank Fraud Trojan" to silent-viruses

2005-06-08 Thread Leonard Tulipan
Hi! Just found this in admin mailbox: (msg in german, but you'll get the drift Achtung: [EMAIL PROTECTED] ... Der virus the Phish-BankFraud.eml.a trojan !!! . MAIL FROM: [EMAIL PROTECTED] RCPT TO: [EMAIL PROTECTED] . ---uvscan results --- /var/spool/qmailscan/tmp/hyperion

[Qmail-scanner-general]silent-virus not used because of "dissallowed attachment"

2005-05-17 Thread Leonard Tulipan
scanner to also scan certain attachements, even though the already got blocked? Or can I somehow quitely block certain attachements (like .cpl, .scr and other exotic things, which should not normally be sent) Cheers Leonard -- MAIER PĂ–TTINGER Werbe und IT Consulting GmbH Leonard Tulipan IT

[Qmail-scanner-general]silent virus - even when attachement is blocked

2005-02-03 Thread Leonard Tulipan
Hi! I just stumbled upon a peculiar problem. Most of the Worms are silently rejected thanks to that code-portion, but... We block most (if not all) executable attachements. So the Perl Scanner part get's triggered, even before it's checked with the virus scanner. That way people get notices, tha

[Qmail-scanner-general]New Bagle Worm - Executable

2005-01-28 Thread Leonard Tulipan
Hi! I just noticed that the newest Bagle variant Bagle.AY/AZ (Symantec, Trend Micro)/Bagle.bj/bk (McAfee) also attaches itself as .cpl file (Windows Control Panel) which also seems to be an executable format on Windows. I added it to my quarantine-attachements, and I think you should too. There

[Qmail-scanner-general]Install "Bugs" on Linux

2004-10-20 Thread Leonard Tulipan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi All! Long time, no see. Just had the urge to upgrade my "old" 1.20rc3 to 1.23. Found a few things configure line 286 - the script always told me to creat a user/group qscand, which I alread had. [EMAIL PROTECTED] qmail-scanner-1.23]# id qscand; echo