[Mimedefang] Bagle-Q gets through!
Andrzej Marecki
amr at astro.uni.torun.pl
Fri Mar 19 07:26:06 EST 2004
Hi again,
OK, I got a sample of Bagle-Q, have made some tests and I know the answer
to my question: Bagle-Q gets through as I suspected. The good news is that
it gets marked as spam with some 5.4 points.
So the situation looks as follows.
1. This is MD that should possibly stop Bagle-Q!
2. Antivirus software detects (and disinfects) Bagle-Q _only_ when a PC
gets infected via the exploit in Outlook which downloads Bagle.
Antivirus software has literally nothing to do when email "promoting"
Bagle-Q arrives simply because there is no viral code there.
--
Andrzej
--
-----------------------------------------------------------------------------
Andrzej Marecki |
Torun Centre for Astronomy | e-mail: amr at astro.uni.torun.pl
N. Copernicus University | WWW: http://www.astro.uni.torun.pl
ul. Gagarina 11 | tel: +48 56 6113032
PL-87-100 Torun, POLAND | fax: +48 56 6113009
-----------------------------------------------------------------------------
"If Bill Gates actually had to admin his own stuff, he'd shoot himself."
-----------------------------------------------------------------------------
More information about the MIMEDefang
mailing list