RE: sophie not getting bagle-h
Sascha Lucas <[email protected]>
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <[email protected]> |
Hi, perheps it dosn't interest, but we are using as secondary AV-Scanner NAI-uvscan (commandline), And sometimes I see in virus-admin-notifications that uvscan (not sophie/sophos) found: W32/Bagle.h!pwdzip I wonder how this is possible, but from time2time I see NAI has good technics to detect some things (excelent 42.zip handling (detects this before unzipping), can find URL-spoof-exploit and now even pwd-protectet zips). It seems they are specialists dealing with zips? this doesn't mean that you should buy uvscan, but if someone has time, he or she may talk about this with sophos. Greetings Sascha.