Price zip?

Julian Field mailscanner at ecs.soton.ac.uk
Mon Aug 9 22:17:00 IST 2004


<x-flowed>
Anyone running a recent version, banning .exe files even within .zip files 
will be stopping this virus anyway.
I am now catching messages containing this virus for 8 different reasons:

     Report: SophosSAVI: price.zip was infected by JS/IllWill-A 
W32/Bagle-AQ W32/Bagle-AQ
             F-Prot: 
/var/spool/MailScanner/incoming/28692/i79LCfZB009813/price.zip->price.html 
Infection: HTML/ObjData at exp
             F-Prot: 
/var/spool/MailScanner/incoming/28692/i79LCfZB009813/price.zip->price/price.exe 
is a dropper for W32/Mitglieder.W
             SophosSAVI: price.exe was infected by W32/Bagle-AQ
             MailScanner: Executable DOS/Windows programs are dangerous in 
email (price.exe)
             No programs allowed (price.exe)
             SophosSAVI: price.html was infected by JS/IllWill-A
             F-Prot: 
/var/spool/MailScanner/incoming/28692/i79LCfZB009813/price.html  Infection: 
HTML/ObjData at exp

I reckon that's pretty thorough interception :-)
-- 
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

</x-flowed>



More information about the MailScanner mailing list