Re: [Exim] New virus?

Pàgina inicial
Delete this message
Reply to this message
Autor: Dan Egli
Data:  
A: exim-users
Assumpte: Re: [Exim] New virus?
This may seem a bizare request, but does anyone have a copy of an
infected email I could ftp or someting? I want to grab a copy to test my
servers make sure they would stop it.

Thanks!
- --- Dan

Dennis Davis wrote:
|>From: Cory Daehn <cdaehn@???>
|>To: exim-users@???
|>Subject: [Exim] New virus?
|>Sender: exim-users-admin@???
|>Date: Fri, 27 Jun 2003 05:09:22 -0500
|>
|>Either
|>
|>A) some spammer clued in that I have disallowed e-mail with
|>.pif/.exe/.bat/.com/etc (using the filter from the exim website and
|>decided to try to send me a virus in a zip file,
|>
|>or
|>
|>B) There's actually a new virus out there that puts itself into a zip file
|>to appear "more safe" to users...
|>
|>It said "The attachment should explain itself."
|>
|>Anyone heard of this one?
|
|
| Probably the W32/Sobig-E virus. See:

|
| http://www.uk.sophos.com/virusinfo/analyses/w32sobige.html

|
| and:

|
| http://www.uk.sophos.com/virusinfo/articles/sobige.html

|
| for details. Yesterday our frontline mail servers detected and
| refused to accept some 750 messages containing this virus.
| All thanks to exim4 + Tom Kistner's exiscan patch + Sophos.

|
| --

|
| ## List details at http://www.exim.org/mailman/listinfo/exim-users

Exim details at http://www.exim.org/ ##
|