Re: encrypted zips / sophie

David Broome wrote:

>Interesting ...
>
>Do have the "W32/Bagle-Zip" ide file and current sophos?
>I'm rejecting hundreds a day.
>
>  
>
Yup and yup. I have the bagle-zip ide installed and it is catching 
hundreds a day.
But the one that was slipping through was bagle-h, even though that 
contains an
encrypted zip. Not a single bagle-h was caught during that period, but 
our desktop
Trend was catching and identifying it.

I have since been blocking all encrypted attachments. Things are good now,
but I'm still confused as to how Sophos missed this one. Did anyone's 
Bagle-H
work?