Hi Markus,
I have no idea, but our server is registering a peak of incoming messages,
with above-normal banned cpl extension attachments in virus folder.

---------------
Franco Celli
[EMAIL PROTECTED]


----- Original Message ----- 
From: "Markus Gufler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, October 29, 2004 10:32 AM
Subject: [Declude.Virus] Unknown virus warnings


> Hi all,
>
> Today I can see a large number of non delivery reports comming back to our
> server containing the original virus warning (recip.eml)
>
> This is the begin of our recip.eml file:
> ===============================================
> SKIPIFSENDER [Forged]
> SKIPIFVIRUSNAMEHAS Vulnerability
> SKIPIFVIRUSNAMEHAS MyDoom
> SKIPIFVIRUSNAMEHAS Netsky
> SKIPIFVIRUSNAMEHAS Bagle
> SKIPIFVIRUSNAMEHAS Unknown Virus
> ONLYSENDIFREMOTESENDER
> To: %ALLRECIPS%
> From: [EMAIL PROTECTED]
>
> ...
>
> ===============================================
>
>
> All returning NDR's are warnings about a "Unknown Virus" so I can't
> understand why they are send out because the according SKIPIFVIRUSNAMEHAS
> line is there as we haven't changed any content of this file in the last 3
> weeks.
>
> NDR'S are comming back from all around the world.
>
> Any ideas?
>
> Markus
>
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.
> ---
> [Quipo ISP - Questa E-mail e' stata controllata dal programma Declude
Virus]
> [Quipo ISP - This E-mail was scanned for viruses by Declude Virus]
>
>

---
[Quipo ISP - Questa E-mail e' stata controllata dal programma Declude Virus]
[Quipo ISP - This E-mail was scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to