[Declude.Virus] Yaha, maybe broken/corrupt, got through

[Jeff Lesperance]

Hi All,
Had a curious instance of what looks like Yaha come through my mail server today, got through Declude/F-Prot including my BANEXT SCR setting (file came through as shake.scr) all the way to an email box where my client found it.

Header in email message had:

X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=#r0xx#

And attachment:

Content-Type: application/octet-stream: name-shake.scr
Content-Transfer-Encoding: base64
Content-Disposition: attachment;

I'm running Declude 1.61 and F-prot with f-prot.exe dated 9/23/02 and def's dated 1/28/03

Declude log file shows:
01/30/2003 11:28:00 Q528e4af4003890ea Scanned: Virus Free [MIME: 1 47368]

Does something look broken enough in those headers to have let it pass through/not look like an attachment to Declude?

(I know I need to updated my Declude, will do)


Jeff Lesperance
Matrix Group International, Inc.
1033 N. Fairfax St. 2nd floor
Alexandria, VA 22314
703.838.9777 x3002

*** Custom Web Solution and Web-Based Association Management Software.
Have you been Maxximized? http://www.matrixmaxx.net ***

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.