RE: Recomendations on gateway antivirus

  • From: "Tiago de Aviz" <Tiago@xxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Thu, 4 Mar 2004 13:00:40 -0300

Hey john,

That's why I simplified the process: I blocked all .zip stuff ;)

Tiago de Aviz
SoftSell
(41) 340-2363
www.softsell.com.br

 
-----Original Message-----
From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] 
Sent: quinta-feira, 4 de março de 2004 12:49
To: [ExchangeList]
Subject: [exchangelist] RE: Recomendations on gateway antivirus

http://www.MSExchange.org/

> We are currently using McAfee Webshield 4.5 as our antivirus for the
> Internet email gateway. We are finding it not very sophisticated to
> block the new viruses, especially the new Bagle virus with encrypted Zip
> files. Any suggestions as to what is the better product to use as a
> gateway antivirus scanner ?

NOTE! Most if not all AV software will not be able to detect and catch an
encrypted zip such as Bagle.J. The reason is this virus is sending (not in
all cases) the virus in encrypted zips using random CRC values, random file
names, and a list of extensions. The biggest problem is the random CRC
values.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------




Other related posts: