RE: [Declude.Virus] Message.zip possible virus

[Kami Razvan]

Title: Message

Hi; We have received several... in all of them this is also in common..   =============================== X-Mailer: The Bat! (v1.61) X-Priority: 2 (High) Subject: [47~]your account                         koikrair MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------4A394B45001229E" X-RBL-Warning: IPNOTINMX: X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected. X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [4000400e]. X-RBL-Warning: SUBJECTSPACES: Subject with at least 15 spaces found. ================================   With this:  X-Mailer: The Bat! (v1.61)   I am thinking that this is perhaps not a virus but some sort of attack .. The Bat! is in our filter file as a program that spammers use.. so that in the header gets a weight of 20.  These are all caught as SPAM & not as virus.   Just thought to share.. perhaps we can find something in common..   For now we have added the following:   BODY 0 CONTAINS filename="message().zip" BODY 0 CONTAINS name="message().zip" without () since the attachment has that signature in the body.. Regards, Kami