[Esd-l] W32.Aliz passed through filter.

[Brett Glass]

At 10:53 AM 11/21/2001, Tomas Kuliavas wrote:
  
>Hi
>
>Is it possible to fix email-sanitizer, so that it can catch this virus?
>
>http://securityresponse.symantec.com/avcenter/venc/data/w32.aliz.worm.html
>
>Virus uses somehow mangled email body and metamail is unable to detect attachment. But Outlook Express can see attached executable.

We just saw two copies pass through John's filter before being caught
by our own malware scanner. Of concern is the fact that the .EXE 
extension was NOT mangled.

--Brett