Paypal virus emails

[Randal, Phil]

More worrying is the PayPal viruses I'm getting which the virus scanners
aren't picking up.  Fortunately my habit of telling SpamAssassin that all
viruses are spams has paid off, as they are being deleted as high-scoring
spams.

It looks like MailScanner isn't seeing the attachment as an attachment.

Anyone else seeing this?

Phil

---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Antony Stone
> Sent: 27 November 2003 19:59
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Paypal virus emails
>
>
> Hi.
>
> I'm sure most people here have seen the recent Paypal emails
> containing
> Mimail-I.
>
> However, I'm curious about where this virus is picking up its
> destination
> email addresses from, because most of the ones I'm seeing are
> addressed to my
> MailScanner address, which only ever appears in the headers
> of emails which
> have been scanned by my MailScanner machine, as a contact
> address if people
> want to ask about the reason for rejects, tests being done, etc.
>
> I have never publicised that address (and I don't want to
> write it in this
> email so that it doesn't go into the archives either), but it
> surprises me
> that Mimail-I is obviously picking up on an address which is
> in the headers
> of emails, but is neither the From: nor the To: address (or
> the envelope).
>
> Is anyone else seeing the same thing, and wondering why
> they're getting
> viruses to addresses which are only in non-standard headers
> of other emails?
>
> Antony.
>
> --
> What makes you think I know what I'm talking about?
> I just have more O'Reilly books than most people.
>
>                                                      Please
> reply to the list;
>
> please don't CC me.
>