Microsoft security bulletin

[Mike Kercher]

Sophos catches these every time!

Mike


> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Pete Russell
> Sent: Tuesday, November 11, 2003 8:22 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Microsoft security bulletin
>
> We are getting the MS Security Bulletin virus/email that is
> totally faked and has a virus attched to it (quite common now
> i think) and it passes straight through with a score of 0.72
>
> IS there a trick to catching these? The attchment is killed
> by our watchguard firewall, but would nice to stop the
> message as well, drives the helpdesk mad with questions about
> applying MS patches.
>
> Thanks
>
> From: Microsoft Security Bulletin <jommtgcxuuhcmc at bulletin.com>
> Subject: Net Critical Upgrade
> To: MS Corporation Customer <yzal at bulletin.com>
> Message-id: <0HO700GIUUQ5HL at mta07bw.email.bigpond.com>
> MIME-version: 1.0
> Content-type: multipart/mixed;
> boundary="Boundary_(ID_x24frAoH9mSYK9L5U4ntig)"
>
> 0.00 HTML_MESSAGE HTML included in message
> 0.72 MIME_HTML_NO_CHARSET Message text in HTML without charset
>