Hey john, That's why I simplified the process: I blocked all .zip stuff ;) Tiago de Aviz SoftSell (41) 340-2363 www.softsell.com.br -----Original Message----- From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: quinta-feira, 4 de março de 2004 12:49 To: [ExchangeList] Subject: [exchangelist] RE: Recomendations on gateway antivirus http://www.MSExchange.org/ > We are currently using McAfee Webshield 4.5 as our antivirus for the > Internet email gateway. We are finding it not very sophisticated to > block the new viruses, especially the new Bagle virus with encrypted Zip > files. Any suggestions as to what is the better product to use as a > gateway antivirus scanner ? NOTE! Most if not all AV software will not be able to detect and catch an encrypted zip such as Bagle.J. The reason is this virus is sending (not in all cases) the virus in encrypted zips using random CRC values, random file names, and a list of extensions. The biggest problem is the random CRC values. John Tolmachoff Engineer/Consultant/Owner eServices For You ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------