Hi,
My "sender.eml" has the line:
SKIPIFFORGING
And my virus.CFG has:
AUTOFORGE ON
FORGINGVIRUS Anonymous Driver
FORGINGVIRUS Antiman
FORGINGVIRUS Avril
FORGINGVIRUS Bagle
Yet, declude virus just sent the "sender.eml" for the following details:
File: "Unknown File"
Result: FoundI-Worm/Bagle
Message ID: <[EMAIL PROTECTED]>
Our Domain: Schmidt.AS for Schmidt.AS
Queue ID: D324e01530000b795.smd
Based on these headers:
-----Original Message Headers-----
Received: from [62.93.44.11] [62.93.44.11] by hm-software.com with ESMTP
(SMTPD-9.10) id A24E331D0; Wed, 13 Dec 2006 12:03:10 -0500
Date: Wed, 13 Dec 2006 18:03:11 +0100
To: "Andy" <[EMAIL PROTECTED]>
From: "Webmaster" <[EMAIL PROTECTED]>
Subject: price 13-Dec-2006
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------oibzhbgyvnajpcxfwpdt"
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
