[Dshield] Now It's Postcard.Exe and New Signature

Johannes B. Ullrich jullrich at sans.org
Wed Jan 31 15:17:01 GMT 2007

what we actually need is a postfix/procmail et al signature for .exe
files. Anything else is just a whack-the-mole band aid.

Tony Earnshaw wrote:
> David Cary Hart wrote, on 31. jan 2007 04:02:
>> I just updated (freshclam) yesterday and this passed. I did another
>> update and;
>> Postcard.exe: Trojan.Downloader-758 FOUND
> Make sure you're running BitDefender (free as in beer for Linux only) 
> alongside ClamAV (you are running amavisd-new, aren't you?)
> --Tonni

Johannes Ullrich                        http://isc.sans.org

SANS 2007 March 29 - April 6 in San Diego, CA offers 52 Courses
taught by our top rated instructors plus a huge vendor tools expo.
	Register Today! <http://www.sans.org/info/2501>
(Brochurecode: ISC)

PGP Key: https://secure.dshield.org/PGPKEYS

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 249 bytes
Desc: OpenPGP digital signature
Url : http://lists.sans.org/pipermail/list/attachments/20070131/befa37c8/attachment.bin 

More information about the list mailing list