heads up folks, I am stopping a new zip virus with the following junkmail
rules, this is all I have seen so far. Contains an exacutable payload called
File-packed_dataInfo.exe
BODY 0 CONTAINS mailtext.zip
BODY 0 CONTAINS downloadm.zip
BODY 0 CONTAINS "mail.zip"
BODY 0 CONTAINS reg_pass-data.zip
BODY 0 CONTAINS Account and Password Information are attached!
Rick Davidson
National Systems Manager
North American Title Group
440-639-0607 - Office
951-233-6342 - Mobile
[EMAIL PROTECTED]
-
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
