[Dshield] Now It's Postcard.Exe and New Signature

bqa0-8e78 at spamex.com bqa0-8e78 at spamex.com
Thu Feb 1 04:52:10 GMT 2007


The SonicWall is blocking them one every 30 seconds to 3 minutes for 
days now for our tiny company.

Bob

Johannes B. Ullrich wrote:
> * Replies will be sent through Spamex to list at lists.dshield.org
> * For additional info click -> http://www.spamex.com/i/?v=6616167
>
>
> what we actually need is a postfix/procmail et al signature for .exe
> files. Anything else is just a whack-the-mole band aid.
>
>
> Tony Earnshaw wrote:
>   
>> David Cary Hart wrote, on 31. jan 2007 04:02:
>>
>>     
>>> I just updated (freshclam) yesterday and this passed. I did another
>>> update and;
>>>
>>> Postcard.exe: Trojan.Downloader-758 FOUND
>>>       
>> Make sure you're running BitDefender (free as in beer for Linux only) 
>> alongside ClamAV (you are running amavisd-new, aren't you?)
>>
>> --Tonni
>>
>>     
>
>
>   
> ------------------------------------------------------------------------
>
> _________________________________________
>
> SANS 2007 March 29 - April 6 in San Diego, CA offers 52 Courses
> taught by our top rated instructors plus a huge vendor tools expo.
> Register Today! http://www.sans.org/info/2501 (BROCHURECODE: ISC)


More information about the list mailing list