Price zip?
Julian Field
mailscanner at ecs.soton.ac.uk
Mon Aug 9 22:17:00 IST 2004
<x-flowed>
Anyone running a recent version, banning .exe files even within .zip files
will be stopping this virus anyway.
I am now catching messages containing this virus for 8 different reasons:
Report: SophosSAVI: price.zip was infected by JS/IllWill-A
W32/Bagle-AQ W32/Bagle-AQ
F-Prot:
/var/spool/MailScanner/incoming/28692/i79LCfZB009813/price.zip->price.html
Infection: HTML/ObjData at exp
F-Prot:
/var/spool/MailScanner/incoming/28692/i79LCfZB009813/price.zip->price/price.exe
is a dropper for W32/Mitglieder.W
SophosSAVI: price.exe was infected by W32/Bagle-AQ
MailScanner: Executable DOS/Windows programs are dangerous in
email (price.exe)
No programs allowed (price.exe)
SophosSAVI: price.html was infected by JS/IllWill-A
F-Prot:
/var/spool/MailScanner/incoming/28692/i79LCfZB009813/price.html Infection:
HTML/ObjData at exp
I reckon that's pretty thorough interception :-)
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
</x-flowed>
More information about the MailScanner
mailing list