[Mimedefang] New .zip virus?

Brent J. Nordquist b-nordquist at bethel.edu
Mon Jan 26 21:31:52 EST 2004


On Mon, 26 Jan 2004, Joseph Brennan <brennan at columbia.edu> wrote:

> This is based on reports at Symantec and another site.
> 
>     if ($fname =~ /(document|readme|doc|text|file|data|test|message|body)/i

Helpful, but I'm also seeing some here named eblpdw.zip (random garbage).  
So far the ZIP ones are all between 22640 and 22798 bytes inclusive.  Can 
someone post a quick example on how to test an attachment's size?  I'm 
hoping File::Scan will soon be updated for the others, but ZIP files don't 
get unpacked.  TIA

-- 
Brent J. Nordquist <b-nordquist at bethel.edu> N0BJN
Other contact information: http://kepler.acns.bethel.edu/~bjn/contact.html
* Fast pipe * Always on * Get out of the way - Tim Bray http://tinyurl.com/7sti



More information about the MIMEDefang mailing list