New Trojan

Randal, Phil prandal at
Thu Jul 24 14:42:45 IST 2008

I'll block all .exes under all circumstances if I was the supreme
commander of this organisation.

But I'm not.

Just thought I'd mention it in case there were others who don't block
.exes in .zip files.

Forefront and Antigen will catch it.

Microsoft, first for a change!  *faints*



Phil Randal
Networks Engineer
Herefordshire Council
Hereford, UK

-----Original Message-----
From: mailscanner-bounces at
[mailto:mailscanner-bounces at] On Behalf Of
Sent: 24 July 2008 14:25
To: MailScanner discussion
Subject: RE: New Trojan


Blocking exe's works for us ;-)

Varient of the UPS parcel virus that's been going around. Looks like the
malware writers maybe going back to email.

Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at
> [mailto:mailscanner-bounces at] On Behalf Of 
> Randal, Phil
> Sent: 24 July 2008 14:18
> To: mailscanner at
> Subject: {Spam?} New Trojan
> New Trojan
> Folks, there's a new trojan being bulk spammed.
> Block the attachment if you can.
> Body text is similar to:
> "
> Good day,
> We have received a parcel for you, sent from France on July 9. Please 
> fill out the customs declaration attached to this message and send it 
> to us by mail or fax. The address and the fax number are at the bottom

> of the declaration form.
> Kind regards,
> Stephen Kenney
> Your Customs Service
> "
> Very few detect it but we're seeing hundreds already.
> Phil
> --
> Phil Randal
> Networks Engineer
> Herefordshire Council
> Hereford, UK

Confidentiality : This e-mail and any attachments are intended for the
addressee only and may be confidential. If they come to you in error you
must take no action based on them, nor must you copy or show them to
anyone. Please advise the sender by replying to this e-mail immediately
and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of
the author and unless specifically stated to the contrary, are not
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure
communications medium and can be subject to data corruption. We advise
that you consider this fact when e-mailing us. 
Viruses : We have taken steps to ensure that this e-mail and any
attachments are free from known viruses but in keeping with good
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales (Company
No:5362730) Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5
1RU, United Kingdom

MailScanner mailing list
mailscanner at

Before posting, read

Support MailScanner development - buy the book off the website! 

More information about the MailScanner mailing list