While going through my logs, I noticed a lot of lines like this:

12/19/2002 09:14:11 Qd43109d000d4e8d9 Found a bogus .jpg file

    I see it's pointing to the same message, but was just curious to know
how common this is?
What version of Declude Virus are you running?

That log file entry is part of an experimental system in Declude Virus designed to find files that aren't what they claim to be (for example, if someone renamed an .exe file to a .jpg extension). However, I believe there was a recent beta that would falsely detect these "bogus" files. In any case, the only damage is the extra log file entries.

    What got me on this was yesterday my NAV snagged a magistr virus that
came through that Declude missed.
Have you checked the Declude Virus log file to see what it says about that E-mail?

 I've also seen alot of these:

12/19/2002 09:48:25 Qdc38012d013e4431 Outlook 'MIME segment in MIME
Preamble' vulnerability in line 17 layer 1 [Content-Type: multipart/altern]
12/19/2002 09:48:25 Qdc38012d013e4431 File(s) are INFECTED [0]

So far all of these seem to be spam, but it's amazing the amount of these in
there....
Yes, there are a lot of spammers who apparently write their own spamware, and send out incorrectly formatted E-mails that contain some of the recently discovered vulnerabilities.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.

Reply via email to