New Trojan

[Randal, Phil]

I'll block all .exes under all circumstances if I was the supreme
commander of this organisation.

But I'm not.

Just thought I'd mention it in case there were others who don't block
.exes in .zip files.

Forefront and Antigen will catch it.

Microsoft, first for a change!  *faints*

Cheers,

Phil

--
Phil Randal
Networks Engineer
Herefordshire Council
Hereford, UK

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
Martin.Hepworth
Sent: 24 July 2008 14:25
To: MailScanner discussion
Subject: RE: New Trojan

Phil

Blocking exe's works for us ;-)

Varient of the UPS parcel virus that's been going around. Looks like the
malware writers maybe going back to email.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of 
> Randal, Phil
> Sent: 24 July 2008 14:18
> To: mailscanner at lists.mailscanner.info
> Subject: {Spam?} New Trojan
>
> New Trojan
> Folks, there's a new trojan being bulk spammed.
> Block the attachment Tax_Invoice.zip if you can.
> Body text is similar to:
> "
> Good day,
> We have received a parcel for you, sent from France on July 9. Please 
> fill out the customs declaration attached to this message and send it 
> to us by mail or fax. The address and the fax number are at the bottom

> of the declaration form.
> Kind regards,
> Stephen Kenney
> Your Customs Service
> "
> Very few detect it but we're seeing hundreds already.
> Phil
> --
> Phil Randal
> Networks Engineer
> Herefordshire Council
> Hereford, UK
>




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the
addressee only and may be confidential. If they come to you in error you
must take no action based on them, nor must you copy or show them to
anyone. Please advise the sender by replying to this e-mail immediately
and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of
the author and unless specifically stated to the contrary, are not
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure
communications medium and can be subject to data corruption. We advise
that you consider this fact when e-mailing us. 
Viruses : We have taken steps to ensure that this e-mail and any
attachments are free from known viruses but in keeping with good
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales (Company
No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5
1RU, United Kingdom
**********************************************************************

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!