Bad Filename Detected

SRW whites at CMHA.NET
Tue Mar 15 14:31:08 GMT 2005


I received this message from mailscanner. My confusion begins with the fact
the message is from my own domain to a one of my users. I tried to do a DNS
lookup on the IP , which indicated there was no record. I am not sure where
to begin to investigate?

Thanks in advance!


the following e-mails were found to have: Bad Filename Detected : Virus Detected

    Sender: postmaster at MYCOMPANY.net
IP Address: 68.21.243.17
 Recipient: cathyp at MYCOMPANY.net
   Subject: Mail System Error - Returned Mail
 MessageID: j24KJ7K08923
    Report: document.txt  .exe was infected: Worm.Mydoom.M-unp
            Very long filenames are good signs of attacks against Microsoft
e-mail packages (document.txt  .exe)
    Report: document.zip was infected: Worm.Mydoom.M-unp
            document.txt  .exe was infected: Worm.Mydoom.M-unp
            Very long filenames are good signs of attacks against Microsoft
e-mail packages (document.txt  .exe)


--
MailScanner
Email Virus Scanner
www.mailscanner.info

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list