Re: Strange Zip Attatchment

[Manu Abraham <manu@kromtek.com>]

	The zip attachments are known to contain viruses. the Novarg virus. The mail 
contains a zip attachment, probably has the suject, hello, Hi, test etc. The 
list that is most affected is the debian-laptop. 

	On M$ machines it takes away your addressbook, you have a lot of unwanted 
network traffic though.
	Please take a look at this URL


securityresponse.symantec.com/avcenter/ venc/data/w32.novarg.a@mm.html

	I don't know how far are other machines affected. If somebody as a bigger 
idea please do let me know.


Regards,
Manu

On Tuesday 27 January 2004 18:26, François TOURDE wrote:
> Le 12444ième jour après Epoch,
>
> Niko Efthymiou écrivait:
> > I have noticed 3 stange zip atachments on this mailing list, all
> > recieved yesterday. I would suspect that it is some kind of virus
> > (havent scanned it).
> >
> > Since there have been quite a few virus epidemies recently (and maling
> > lists are a good place for spreding them), I would like to propose
> > following alternatives:
> >
> > 1. Dissallow atachments alltogether on debian lists (send them to
> > /dev/null)
>
> And what about legal attachements, like logs, config files, etc. ?
>
> > 2. Allow only certein mime types in mutipart messages
>
> You're probably right, but who makes the choices?
>
> > 3. Scan the emails for virii and if positive discard them (will
> > probably  eat up to many resources.)
>
> I think there is already a mechanism like amavis+clamav+spamassassin
> on the list. Check your headers to confirm. My headers are already
> modified by this piece of software on my side, so I can't check if the
> list do that already.
>
> --
>  All generalisations are dangerous, including this one.