Price zip?

Julian Field mailscanner at ecs.soton.ac.uk
Mon Aug 9 22:17:00 IST 2004


<x-flowed>
Anyone running a recent version, banning .exe files even within .zip files
will be stopping this virus anyway.
I am now catching messages containing this virus for 8 different reasons:

     Report: SophosSAVI: price.zip was infected by JS/IllWill-A
W32/Bagle-AQ W32/Bagle-AQ
             F-Prot:
/var/spool/MailScanner/incoming/28692/i79LCfZB009813/price.zip->price.html
Infection: HTML/ObjData at exp
             F-Prot:
/var/spool/MailScanner/incoming/28692/i79LCfZB009813/price.zip->price/price.exe
is a dropper for W32/Mitglieder.W
             SophosSAVI: price.exe was infected by W32/Bagle-AQ
             MailScanner: Executable DOS/Windows programs are dangerous in
email (price.exe)
             No programs allowed (price.exe)
             SophosSAVI: price.html was infected by JS/IllWill-A
             F-Prot:
/var/spool/MailScanner/incoming/28692/i79LCfZB009813/price.html  Infection:
HTML/ObjData at exp

I reckon that's pretty thorough interception :-)
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
</x-flowed>



More information about the MailScanner mailing list