Netsky

[Joe Stuart]

>>> mailscanner at ECS.SOTON.AC.UK 03/12/04 09:15AM >>>
At 14:53 12/03/2004, you wrote:
>>I have a couple questions about hte Netsky.D virus.
>>First, Mailscanner seems to be quarantining .txt files and when you
>l>ook in the maillog it will say something like this about the virus.
>>Could anyone explain how that works?
>>msg-22860-189.txt->document_4351.pif

>They are often created by bounce messages where the silly bouncing MTA
has
>ncluded the entire message in the bounce report.

>>Second,  I am starting to receive emails that have my
viruswarning.txt
>>message in place of the body of the email and they all refer to the
>>Netsky.D virus and I was wondering if anyone had any thoughts as to
why
>>that would just start happening.  Usually the virus warning is sent
as
>>an attachment.

>What version of MailScanner are you running? It is logged to the
maillog
>whenever MailScanner starts.


It version 4.21-9 I'm running redhat. I know that different versions
deal with the viruswarning differently this one is consistently sending
them as an attachement except for an occaisonal one that always refers
to Netsky. It's not a big deal just curious.

Thanks