I've seen zip attachments with no content (like 70 bytes long the zip file). The mail looks just as a Netsky worm, but with no content in the zip.
-samuel > -----Mensaje original----- > De: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] nombre de Bad Apple > Enviado el: Lunes, 31 de Mayo de 2004 11:52 a.m. > Para: [EMAIL PROTECTED] > Asunto: [Clamav-users] Zero bytes vbs & cpl attachment > > > Hi all , > > I use qmail-ldap + qmail-scanner (v 1.22 ) + > clamav-0.70 . > > From some time I have been seeing mails which pass > through the ClamAV , > which have a zero bytes attachment of .vbs & .cpl > extention . > I have stopped these mails by the content scanning > rules in Qmail-Scanner > .Still I was wondering if any body has faced this > issue . Any help will be > appreciated . > > Thanx in advance > BadApple > > > > ________________________________________________________________________ > Yahoo! India Matrimony: Find your partner online. > http://yahoo.shaadi.com/india-matrimony/ > > > ------------------------------------------------------- > This SF.Net email is sponsored by: Oracle 10g > Get certified on the hottest thing ever to hit the market... Oracle 10g. > Take an Oracle 10g class now, and we'll give you the exam FREE. > http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
