>From: Cory Daehn <cdaehn@???>
>To: exim-users@???
>Subject: [Exim] New virus?
>Sender: exim-users-admin@???
>Date: Fri, 27 Jun 2003 05:09:22 -0500
>
>Either
>
>A) some spammer clued in that I have disallowed e-mail with
>.pif/.exe/.bat/.com/etc (using the filter from the exim website and
>decided to try to send me a virus in a zip file,
>
>or
>
>B) There's actually a new virus out there that puts itself into a zip file
>to appear "more safe" to users...
>
>It said "The attachment should explain itself."
>
>Anyone heard of this one?
Probably the W32/Sobig-E virus. See:
http://www.uk.sophos.com/virusinfo/analyses/w32sobige.html
and:
http://www.uk.sophos.com/virusinfo/articles/sobige.html
for details. Yesterday our frontline mail servers detected and
refused to accept some 750 messages containing this virus.
All thanks to exim4 + Tom Kistner's exiscan patch + Sophos.
