Re: [Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Salvatore Toribio
Doug Monroe wrote: Salvatore Toribio wrote: I've received this report from Sophos Troj/Tofger-A may arrive attached to an email as a password protected ZIP file. The email would have a blank subject line, the message text "Hi! As I've promised I'm sending you my photo. Use old password: 123" a

Re: [Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Ron Culler
Trey, Your correct by using the name+extension with 0 you are requiring an exact match. We used the exact line in our scanners yesterday for the same virus. We still allow zip files to be scanned unless they are an exact match for that excluded name. On Thu, 2003-11-20 at 09:08, Trey Nolen wr

Re: [Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Trey Nolen
I believe you CAN combine the "two types." We have done it before. Using 0 for the bytes matches that filename on any size file. Trey Nolen > Salvatore Toribio wrote: > > > I've received this report from Sophos > > > > Troj/Tofger-A may arrive attached to an email as a password protected > > Z

Re: [Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Doug Monroe
Salvatore Toribio wrote: I've received this report from Sophos Troj/Tofger-A may arrive attached to an email as a password protected ZIP file. The email would have a blank subject line, the message text "Hi! As I've promised I'm sending you my photo. Use old password: 123" and an attached file

[Qmail-scanner-general]Troj/Tofger-A

2003-11-20 Thread Salvatore Toribio
Title: Troj/Tofger-A I've received this report from Sophos Troj/Tofger-A may arrive attached to an email as a password protected ZIP file. The email would have a blank subject line, the message text "Hi! As I've promised I'm sending you my photo. Use old password: 123" and an attached file named