{Virus} new phishing (fwd)

[Joakim Cefalk]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

On my system too, but only antivir found a infection not f-prot.

Marcel Blenkers wrote:

>Hi there,
>
>on my system the Mail from Peter Peters with subject "New Phishing" was
>found to be infected??
>
>Greetings
>
>Marcel
>
>---------- Forwarded message ----------
>Date: Wed, 1 Dec 2004 11:33:13 +0100
>From: Peter Peters <p.g.m.peters at utwente.nl>
>Reply-To: peter.peters at utwente.nl
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: {Virus} new phishing
>
>Warning: This message has had one or more attachments removed
>Warning: (the entire message).
>Warning: Please read the "irc-addicts.de-Attachment-Warning.txt" attachment(s) for more information.
>
>This is a message from the MailScanner E-Mail Virus Protection Service
>----------------------------------------------------------------------
>The original e-mail attachment "the entire message"
>was believed to be infected by a virus and has been replaced by this warning
>message.
>
>If you wish to receive a copy of the *infected* attachment, please
>e-mail your Sysadmins and include the whole of this message
>in your request. Alternatively, you can call them, with
>the contents of this message to hand when you call.
>
>At Wed Dec  1 11:36:31 2004 the virus scanner said:
>   AntiVir: ALERT: [TR/Phish.Bankfr.eml7 virus] msg-16089-9.txt <<< The Trojan horse TR/Phish.Bankfr.eml7
>
>
>Again for Info:
>Date: 20041201
>Message: iB1AaOYS017815
>
>--
>Postmaster
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>  
>

-- 
Joakim Cefalk
Fredentorpsgatan 10A
281 47  HÄSSLEHOLM
Epost: joakim at cefalk.com

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!