sobig virus

[Julian Field]

At 17:09 20/08/2003, you wrote:
>Here is one from mine. that went through
>
>Received: from S0030213072
>         (mul2.dsl.visi.com [209.98.144.89])
>         by edenpr.k12.mn.us; Wed, 20 Aug 2003 11:01:20 -0500
>From: <kenrep at on.aibn.com>
>To: <rgrassel at edenpr.k12.mn.us>
>Subject: Re: Wicked screensaver
>Date: Wed, 20 Aug 2003 10:59:53 --0500
>X-MailScanner: Found to be clean
>Importance: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2600.0000
>X-MSMail-Priority: Normal
>X-Priority: 3 (Normal)
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
>         boundary="_NextPart_000_245BAC29"
>
>This is a multipart message in MIME format
>
>--_NextPart_000_245BAC29
>Content-Type: text/plain;
>         charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>
>Please see the attached file for details.
>--_NextPart_000_245BAC29
>Content-Type: application/octet-stream;
>         name="details.pif"
>Content-Transfer-Encoding: base64
>Content-Disposition: attachment;
>         filename="details.pif"

So if it got through MailScanner, where are the headers showing it? (And I
don't mean the "X-MailScanner: Found to be clean" that was in the original
virus sent to you).
--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support