Had a curious instance of what looks like Yaha come through my mail server today, got through Declude/F-Prot including my BANEXT SCR setting (file came through as shake.scr) all the way to an email box where my client found it.

Header in email message had:

X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=#r0xx#

And attachment:

Content-Type: application/octet-stream: name-shake.scr
Content-Transfer-Encoding: base64
Content-Disposition: attachment;

I'm running Declude 1.61 and F-prot with f-prot.exe dated 9/23/02 and def's dated 1/28/03
Do you still have the E-mail in the .mbx file (which we can use to test here)?

Is the "name-shake.scr" a typo (it should be "name=shake.scr")?
                                        -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to