Netsky

[Julian Field]

At 14:53 12/03/2004, you wrote:
>I have a couple questions about hte Netsky.D virus.
>First, Mailscanner seems to be quarantining .txt files and when you
>look in the maillog it will say something like this about the virus.
>Could anyone explain how that works?
>msg-22860-189.txt->document_4351.pif

They are often created by bounce messages where the silly bouncing MTA has
included the entire message in the bounce report.

>Second,  I am starting to receive emails that have my viruswarning.txt
>message in place of the body of the email and they all refer to the
>Netsky.D virus and I was wondering if anyone had any thoughts as to why
>that would just start happening.  Usually the virus warning is sent as
>an attachment.

What version of MailScanner are you running? It is logged to the maillog
whenever MailScanner starts.
--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654