Re: Re: [Security] ZIP file attachments temporarily blocked on CalMail

From: Richard A. Peters <rap_at_berkeley.edu>
Date: Wed Mar 03 2004 - 01:15:10 PST

That is what our anti-virus software normally does. However the
particular virus which is causing trouble uses an encrypted zip file
which the software is unable to decrypt.

..Richard Peters
   Central Computing Services

At 12:02 AM -0800 3/3/04, Ryan L. Means wrote:
>Aron,
>
>Forgive me if this has been asked already, but can't the virus scanner
>scan inside the Zip file? I think that it would be best to drop only
>those Zip files which contain an actual virus.
>
>Ryan
>
>> >> On Tue, 2 Mar 2004, Aron Roberts wrote:
>> >>
>> >> > Messages containing ZIP file attachments will soon be blocked
>on
>> >> > the CalMail email system, at least temporarily.
>> >> >
>> >> > From what I understand, messages with virus-containing
>attachments
>> >> > purporting to come from "The Berkeley.edu Team" and
>support@socrates,
>> >> > and using various techniques of social engineering -- such as
>telling
>> >> > users that important instructions are included in these
>attachments,
>> >> > or warning users that their accounts will be deactivated unless
>they
>> >> > open these attachments -- have started appearing.
>> >> >
>> >> > This situation is being investigated, and as an interim
>protective
>> >> > measure, messages containing ZIP files will temporarily be
>blocked.
>> >> >
>> >> > Aron Roberts
>> >> > Workstation Software Support Group
>> >> > (for the CalMail team)
>> >> > -------------------------------------
>> >> > Sent via the ucb-security mailing list.
>> >> >
>
>
>------------------------------------------------------------------------
>The following was automatically added to this message by the list server:
>
>For information about Micronet, including subscribing to
>or unsubscribing from its mailing list and finding out
>about upcoming meetings, please visit the Micronet Web site:
><http://micronet.berkeley.edu/>.

-- 
------------------------------------------------------------------------
The following was automatically added to this message by the list server:
For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Wed Mar 3 01:16:00 2004

This archive was generated by hypermail 2.1.8 : Wed Mar 03 2004 - 01:16:00 PST