[Mimedefang] Bagle-Q and Bagle-R

[Gordon Henderson]

On Thu, 18 Mar 2004, Jon R. Kibler wrote:

> Andrzej Marecki wrote:
> >
> > Unlike most email viruses, Bagle-Q and Bagle-R worms do not carry email
> > attachments. It's not clear to me whether they get caught on Un*x based
> > mailservers running MIMEDefang + Sophie. Any clues?
> >
> > Andrzej
>
> ASAIK, ClamAV is the only AV I know that has released a signature for
> this.

Sophos:

-rw-r--r--    1 root     root          273 Mar 18 11:31 bagle-r.ide
-rw-r--r--    1 root     root          171 Mar 18 07:16 bagle-q.ide

Gordon