[Mimedefang] Bagle-Q gets through!

Andrzej Marecki amr at astro.uni.torun.pl
Fri Mar 19 07:26:06 EST 2004


Hi again,

OK, I got a sample of Bagle-Q, have made some tests and I know the answer
to my question: Bagle-Q gets through as I suspected. The good news is that
it gets marked as spam with some 5.4 points.

So the situation looks as follows.

1. This is MD that should possibly stop Bagle-Q!
2. Antivirus software detects (and disinfects) Bagle-Q _only_ when a PC
   gets infected via the exploit in Outlook which downloads Bagle.
   Antivirus software has literally nothing to do when email "promoting"
   Bagle-Q arrives simply because there is no viral code there.

--
Andrzej

-- 
-----------------------------------------------------------------------------  
Andrzej Marecki                | 
Torun Centre for Astronomy     |   e-mail: amr at astro.uni.torun.pl
N. Copernicus University       |   WWW:    http://www.astro.uni.torun.pl
ul. Gagarina 11                |   tel: +48 56 6113032
PL-87-100 Torun, POLAND        |   fax: +48 56 6113009
-----------------------------------------------------------------------------  
"If Bill Gates actually had to admin his own stuff, he'd shoot himself."
-----------------------------------------------------------------------------  



More information about the MIMEDefang mailing list