[Dshield] Now It's Postcard.Exe and New Signature
Johannes B. Ullrich
jullrich at sans.org
Wed Jan 31 15:17:01 GMT 2007
what we actually need is a postfix/procmail et al signature for .exe
files. Anything else is just a whack-the-mole band aid.
Tony Earnshaw wrote:
> David Cary Hart wrote, on 31. jan 2007 04:02:
>> I just updated (freshclam) yesterday and this passed. I did another
>> update and;
>> Postcard.exe: Trojan.Downloader-758 FOUND
> Make sure you're running BitDefender (free as in beer for Linux only)
> alongside ClamAV (you are running amavisd-new, aren't you?)
Johannes Ullrich http://isc.sans.org
SANS 2007 March 29 - April 6 in San Diego, CA offers 52 Courses
taught by our top rated instructors plus a huge vendor tools expo.
Register Today! <http://www.sans.org/info/2501>
PGP Key: https://secure.dshield.org/PGPKEYS
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 249 bytes
Desc: OpenPGP digital signature
Url : http://lists.sans.org/pipermail/list/attachments/20070131/befa37c8/attachment.bin
More information about the list