Bad Filename Detected
SRW
whites at CMHA.NET
Tue Mar 15 14:31:08 GMT 2005
I received this message from mailscanner. My confusion begins with the fact
the message is from my own domain to a one of my users. I tried to do a DNS
lookup on the IP , which indicated there was no record. I am not sure where
to begin to investigate?
Thanks in advance!
the following e-mails were found to have: Bad Filename Detected : Virus Detected
Sender: postmaster at MYCOMPANY.net
IP Address: 68.21.243.17
Recipient: cathyp at MYCOMPANY.net
Subject: Mail System Error - Returned Mail
MessageID: j24KJ7K08923
Report: document.txt .exe was infected: Worm.Mydoom.M-unp
Very long filenames are good signs of attacks against Microsoft
e-mail packages (document.txt .exe)
Report: document.zip was infected: Worm.Mydoom.M-unp
document.txt .exe was infected: Worm.Mydoom.M-unp
Very long filenames are good signs of attacks against Microsoft
e-mail packages (document.txt .exe)
--
MailScanner
Email Virus Scanner
www.mailscanner.info
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list