Virus alert

[Drew Marshall]

On Fri, March 3, 2006 13:50, Stephen Swaney wrote:
> We're seeing a ton of these at many sites here in the US right now. Looks
> like they started overnight.
>
> ---------------------------
> The following e-mails were found to have: Bad Filename Detected
>
>     Sender: dax at 039.com
> IP Address: 59.2.134.56
>  Recipient: falesejo at lewisu.edu
>    Subject:
>  MessageID: k23D3uTH027733
> Quarantine: /var/spool/MailScanner/quarantine/20060303/k23D3uTH027733
>     Report: MailScanner: No programs allowed (msg-22172-24.txt)
> ---------------------------
>
> The files all have names similar to msg-22172-24.txt
>
> file shows:
> # file msg-22172-24.txt
> msg-22172-24.txt: MIPSEL-BE MIPS-III ECOFF executable not stripped -
> version
> 0.0

Yes, I have seen one these too. Having one of those days I haven't had
time to look at it any further to investigate if the .txt file really is
any thing dodgy or just has an unfortunate string of characters.

Drew


-- 
In line with our policy, this message has 
been scanned for viruses and dangerous 
content by MailScanner, and is believed to be clean.
www.themarshalls.co.uk/policy