: RE: [Declude.JunkMail] virus or spam?
Hi Gary:
I have seen a lot of it.. In every domain and in every userID :)
Credit memo attached to deleted payment receipt cannot be applied to
different invoice
--=_NextPart_000_0001_01C6B98B.1759ED80
Content-Type: application/msword;
name
Today I discovered a new spam on my server that at first I thought might be a
virus. It had the subject line Bill Summary - Invoice #36644 and August
Payment Summary, Invoice #48729 with the number being random. It delivers its
message inside an attached word document called invoice.doc. When
This morning, while going through the email holds, I noticed an email with an
attachment that was 99K... the typical size of infected Bugbear virus
emails.
So luckily we didn't send it through...
According to the docs (and my boss), the virus scanner should be picking
up any
messages before it
Declude Virus will run before Declude JunkMail -- except if you use an
AVAFTERJM option in your virus.cfg file.
I've checked our config file and we're not using the option.
If you check the time/date of the E-mail that was held, you'll probably see
that it was held before the virus
The odd thing is that the extension was Resume.doc.pif. We have pif as
one of
our BANEXT options, so really Declude Virus should have picked up the .pif
and
automatically quarantined it. Whether or not it was updated to detect any
new
variant of Bugbear (is there a new variant out there
We've recently been having a lot of Bugbear virus emails hitting our virus
scanner. We've done a lot of scanning for the virus on our workstations and
servers and so far we're clean (except for the ones that Declude pick up).
This morning, while going through the email holds, I noticed an email
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Andy Schmidt
Sent: Sunday, July 29, 2001 17:26
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Virus and Spam Stats
Would you mind sharing that project with us?
1. Setup
a) I use the following LOG settings - haven't
Sure, go ahead! Enjoy.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Terrence Koeman
Sent: Sunday, July 29, 2001 11:52 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Virus and Spam Stats
Thank you very much!
Would you mind me porting
