{Virus?} Subject: 2008 Designer Shoes Collection from Gucci Ugg Prada Chanel Dsquared

Julian Field MailScanner at ecs.soton.ac.uk
Thu Apr 24 17:04:50 IST 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Kevin Murphy wrote:
> Hello All
>
> My recently upgrade MS/SA has picked up a virus. Is it real?
>   
It's actually a piece of spam, detected by the new SaneSecurity ClamAV 
signatures that extend ClamAV's abilities into detecting some spam. The 
clue is in the output here:

Email.Spam.Gen2344.Sanesecurity.08042303

This shows that it's the SaneSecurity signatures at work. It is 
definitely spam, and you definitely don't want it.

Hope that helps,
Jules.
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
> mailscanner at barendse.to
> Sent: 24 April 2008 15:48
> To: mailscanner at lists.mailscanner.info
> Subject: {Virus?} Subject: 2008 Designer Shoes Collection from Gucci Ugg
> Prada Chanel Dsquared
>
> Warning: This message has had one or more attachments removed
> Warning: (the entire message).
> Warning: Please read the "Midland-ICS-Attachment-Warning.txt" attachment(s)
> for more information.
>
> This is a message from the MailScanner E-Mail Virus Protection Service
> ----------------------------------------------------------------------
> The original e-mail attachment "the entire message"
> was believed to be infected by a virus and has been replaced by this warning
> message.
>
> If you wish to receive a copy of the *infected* attachment, please
> e-mail helpdesk and include the whole of this message
> in your request. Alternatively, you can call them, with
> the contents of this message to hand when you call.
>
> At Thu Apr 24 16:15:39 2008 the virus scanner said:
>    ClamAVModule:  message was infected:
> Email.Spam.Gen2344.Sanesecurity.08042303
>    
>    ClamAVModule: msg-20785-42.txt was infected:
> Email.Spam.Gen2344.Sanesecurity.08042303
>
> Note to Help Desk: Look on the Midland-ICS MailScanner in
> /var/spool/MailScanner/quarantine/20080424 (message m3OFFcxe026732).
>   

Jules

- -- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.8.2 (Build 3005)
Comment: Use Enigmail to decrypt or check this message is legitimate
Charset: ISO-8859-1

wj8DBQFIEK+jEfZZRxQVtlQRAsIqAKCzTtTQJy8SOEu0r85PGpeiNDY/3wCg481w
8PxRj2aEMMJ8NcKRnOgYBxo=
=M3LC
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list