Re: [Exim] Mydoom and virus signature updates

Kjetil Torgrim Homme <kjetilho@???> wrote:
> [Alan J. Flavell]:
>> And has someone got a large shovel to get rid of these damned
>> Mydoom-variant nondelivery reports that are getting sent to our
>> postmaster address?
>
> I wish... but first I wish we had a working AV. I got my first copy
> of at 12:45 UTC, but Sophos didn't have an updated signature file
> until 16:31. and it still doesn't recognise some variants of it! (I
> just _assume_ ZIP files which contain files named "message.html
> [80 more spaces].exe" are malware.)
>
> 9 hours and counting -- that's pretty bad, I think. I'd be interested
> to hear how fast Sophos' competitors issued new virus signatures.

My consumer-grade McAfee just updated in the past few minutes - it now
catches a sample of this one. The clamav on my mail relays doesn't yet,
though.

Peter