OT: How's this for "better safe than safe"?

Alex Neuman alex at nkpanama.com
Wed Jun 9 01:45:33 IST 2004


 

-----Original Message-----
From: MailScanner [mailto:postmaster at nkpanama.com] 
Sent: Tuesday, June 08, 2004 7:45 PM
To: postmaster at nkpanama.com
Subject: Warning: E-mail viruses detected

The following e-mail messages were found to have viruses in them:

    Sender: tester at testvirus.org
IP Address: 12.5.19.157
 Recipient: test at nkpanama.com
   Subject: Virus Scanner Test #1
 MessageID: i590iD64025554
    Report: ClamAV Module: eicar.com was infected: Eicar-Test-Signature
            AntiVir: ALERT: [Eicar-Test-Signatur virus]
./i590iD64025554/eicar.com <<< Contains code of the Eicar-Test-Signatur
virus
            F-Prot:
/var/spool/MailScanner/incoming/25477/i590iD64025554/eicar.com  Infection:
EICAR_Test_File
            SophosSAVI: eicar.com was infected by EICAR-AV-Test
            Bitdefender: Found virus EICAR-Test-File (not a virus) in file
eicar.com
            DrWeb: Found virus EICAR Test File (NOT a Virus!) in file
eicar.com
            McAfee: /i590iD64025554/eicar.com        Found: EICAR test file
NOT a virus.
            Kaspersky:
/var/spool/MailScanner/incoming/25477/i590iD64025554/eicar.com INFECTED
EICAR-Test-File
            Inoculan: [././i590iD64025554/eicar.com] was infected by virus
[EICAR test file]
            Panda: EICAR-AV-TEST-FILE
            MailScanner: Executable DOS/Windows programs are dangerous in
email (eicar.com)

Full headers are:

 Return-Path: <g>
 Received: from mail01.excedent.us (crc2.excedent.us [12.5.19.157])
        by nkpanama.com (8.12.10/8.12.10) with ESMTP id i590iD64025554
        for <test at nkpanama.com>; Tue, 8 Jun 2004 19:44:14 -0500
 X-Originating-Ip: 201.224.101.32
 Message-Id: <277886. at testvirus.org>
 Date: Tue, 08 Jun 2004 20:43:46 -0500
 From: "TESTVIRUS.org" <tester at testvirus.org>
 To: <test at nkpanama.com>
 Subject: Virus Scanner Test #1
 Mime-Version: 1.0
 Content-Type: multipart/mixed;
        BounDary="=====================_307115168==_"


-- 
MailScanner
Email Virus Scanner
www.mailscanner.info

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html




More information about the MailScanner mailing list