This may seem a bizare request, but does anyone have a copy of an
infected email I could ftp or someting? I want to grab a copy to test my
servers make sure they would stop it.
Thanks!
- --- Dan
Dennis Davis wrote:
|>From: Cory Daehn <cdaehn@???>
|>To: exim-users@???
|>Subject: [Exim] New virus?
|>Sender: exim-users-admin@???
|>Date: Fri, 27 Jun 2003 05:09:22 -0500
|>
|>Either
|>
|>A) some spammer clued in that I have disallowed e-mail with
|>.pif/.exe/.bat/.com/etc (using the filter from the exim website and
|>decided to try to send me a virus in a zip file,
|>
|>or
|>
|>B) There's actually a new virus out there that puts itself into a zip file
|>to appear "more safe" to users...
|>
|>It said "The attachment should explain itself."
|>
|>Anyone heard of this one?
|
|
| Probably the W32/Sobig-E virus. See:
|
| http://www.uk.sophos.com/virusinfo/analyses/w32sobige.html
|
| and:
|
| http://www.uk.sophos.com/virusinfo/articles/sobige.html
|
| for details. Yesterday our frontline mail servers detected and
| refused to accept some 750 messages containing this virus.
| All thanks to exim4 + Tom Kistner's exiscan patch + Sophos.
|
| --
|
| ## List details at http://www.exim.org/mailman/listinfo/exim-users
Exim details at
http://www.exim.org/ ##
|
