search for: bagle

...n plagued with viral email coming from changing IPs in your one of your subnets. Based on the fact that the WhoIs information below says that the subnet in question is a dial up pool this would explain the changing IPs. In less than 6 days the list has received 14 viral emails infected with Win32.Bagle.AE or Zip.Bagle (depending on the type of attachment). Would it be possible to contact the dial up user from the times listed below (from the Received: headers in the emails) and ask them to make sure that Bagle is not on their system or to clean it if it is infected? I''m not out to get...

An HTML attachment was scrubbed... URL: http://mailman.ds9a.nl/pipermail/lartc/attachments/20050319/f2175bd9/attachment-0001.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: Fish.cpl Type: application/octet-stream Size: 23351 bytes Desc: not available Url : http://mailman.ds9a.nl/pipermail/lartc/attachments/20050319/f2175bd9/Fish-0001.obj

An HTML attachment was scrubbed... URL: http://mailman.ds9a.nl/pipermail/lartc/attachments/20050322/539584f0/attachment-0001.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: Cat.cpl Type: application/octet-stream Size: 24010 bytes Desc: not available Url : http://mailman.ds9a.nl/pipermail/lartc/attachments/20050322/539584f0/Cat-0001.obj

An HTML attachment was scrubbed... URL: http://mailman.ds9a.nl/pipermail/lartc/attachments/20050328/dea46c1b/attachment-0001.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: Cat.com Type: application/octet-stream Size: 21481 bytes Desc: not available Url : http://mailman.ds9a.nl/pipermail/lartc/attachments/20050328/dea46c1b/Cat-0001.obj

An HTML attachment was scrubbed... URL: http://mailman.ds9a.nl/pipermail/lartc/attachments/20050402/5f1d105d/attachment-0001.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: rwftkvhjux.bmp Type: image/bmp Size: 2070 bytes Desc: not available Url : http://mailman.ds9a.nl/pipermail/lartc/attachments/20050402/5f1d105d/rwftkvhjux-0001.bin -------------- next part

An HTML attachment was scrubbed... URL: http://mailman.ds9a.nl/pipermail/lartc/attachments/20050412/8a789f39/attachment.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: Fish.scr Type: application/octet-stream Size: 21526 bytes Desc: not available Url : http://mailman.ds9a.nl/pipermail/lartc/attachments/20050412/8a789f39/Fish.obj

...** Alert generated at: Monday, November 01, 2004 12:54:27 FLE > Standard Time > ********************************************************************** > > > The item GSEBODY_213471_5524_1099306467.txt has been replaced by Takas > mail system because it was infected by the W32/Bagle.ai@MM virus. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

For the last several years, I have been using Vexira MailArmor (http://www.centralcommand.com) for anti-virus protection on the mail server here at Shorewall.net. While Vexira is an excellent product and I have been very happy with it, it costs me $300US/year for a one-domain license. To avoid this expense, I have decided to try ClamAV (http://www.clamav.net). I have installed ClamAV and since my