Price zip?

[Stephen Swaney]

________________________________________
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Max Kipness
Sent: Monday, August 09, 2004 3:42 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Price zip?

Hello -
 
Anybody getting flooded with various named zip attachments with viruses in
them? Some are being caught as a bagel variant, some are getting through.
 
Thanks,
Max
 

Yes. ClamAV is definitely catching it starting aroung 1:00 PM EDT. The
attachments all appear to end in price.zip so blocking filenames price\.zip$
appears also work.


    Sender: facultysearch at aurora.edu
IP Address: 68.20.169.164
 Recipient: admissions at lewisu.edu
   Subject: 
 MessageID: i79JoAEA030294
    Report: ClamAV Module: price_08.zip was infected: Trojan.JS.RunMe

Stephen Swaney
President
Fortress Systems Ltd.
Steve.Swaney at FSL.com


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Fortress Systems Ltd.
www.fsl.com

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html