I just ran the zip through Trend Micro and it immediately picked it up. Normally Trend Micro realtime scans do not scan compressed files until opened (unless set manually) - some scanners also allow you to set how many layers to scan compressed files. Ironically, I had to re-install my anti-virus and I had not re-set my settings yet.
I've included the mail headers (I rescued it from my trash...luckily I haven't closed my email program):
From - Wed Apr 20 15:02:31 2005
X-Account-Key: account1 X-UIDL: sm_00001CBC_58652b4986d34275b51c0a5632fe2e2b X-Mozilla-Status: 0003 X-Mozilla-Status2: 10000000 Return-Path: <[EMAIL PROTECTED]> Received: from 199-231-128-19.n0c.net [199.231.128.19] by mail1.gearhost.com with SMTP; Wed, 20 Apr 2005 12:47:50 -0600 Received: from Andydesktop.com ([12.210.208.58]) by cflib.org with MailEnable ESMTP; Wed, 20 Apr 2005 14:43:55 -0400 Date: Wed, 20 Apr 2005 13:48:14 -0600 To: "Cfcdev" <[email protected]> From: "Cfcdev-owner" <[EMAIL PROTECTED]> Subject: [CFCDev] Message-ID: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--------loinzmrmxvfznbesjxay" Precedence: bulk Reply-To: [email protected] Sender: [EMAIL PROTECTED] X-SmarterMail-Spam: BAYESIAN FILTERING, SPF_None X-Rcpt-To: <[EMAIL PROTECTED]>
According to whois.sc: 199.231.128.19 = cflib.org.
According to whois.sc: 12.210.208.58 = AT&T Worldnet Services (RDNS: 12-210-208-58.client.insightBB.com)
Sounds like someone is infected...
Best, .Peter
-- Peter J. Farrell :: Maestro Publishing
blog :: http://blog.maestropublishing.com email :: [EMAIL PROTECTED]
Create boilerplate beans! Check out the Mach-II Bean Creator - free download. http://blog.maestropublishing.com/mach-ii_beaner.htm
On Stardate 9567.39 which is Tuesday, I saw the light. --
---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email.
CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com).
An archive of the CFCDev list is available at www.mail-archive.com/[email protected]
