[Esd-l] W32/Yaha.g@MM

Scott Taylor scott at dctchambers.com
Mon Jun 24 07:18:01 PDT 2002

At 06:33 PM 23/06/2002, Paul Ferwerda wrote:
>Anyone have a rule for the W32/Yaha.g at MM virus?  I just received two and 
>wanted to update the sanitizer's filters to handle it but don't consider 
>myself expert enough to do so yet.

[snip from Symantec Virus Encyclopedia]
The attachment will have a .bat, .pif or .scr file extension.

This file types exist in the poison file, shouldn't be a problem if you set 
up the sanitizer while following John's most excellent instructions.


More information about the esd-l mailing list