>> The attachment comes as photos.zip and so far neither Mcafee or F-prot is catching them. <<
Wrong, Our McAfee has been blocking it since 11:17 AM this morning. 10/31/2003 11:17:15 Q8ac30620009e0f1f Scanner 1: Virus= the W32/[EMAIL PROTECTED] virus !!! Attachment=photos.zip [13] I 10/31/2003 11:17:15 Q8ac30620009e0f1f File(s) are INFECTED [ the W32/[EMAIL PROTECTED] virus !!!: 13] 10/31/2003 11:17:15 Q8ac30620009e0f1f Deleting file with virus 10/31/2003 11:17:15 Q8ac30620009e0f1f Deleting E-mail with virus! 10/31/2003 11:17:15 Q8ac30620009e0f1f Scanned: CONTAINS A VIRUS [MIME: 2 13306] 10/31/2003 11:17:15 Q8ac30620009e0f1f From: [Forged] To: [EMAIL PROTECTED] [incoming from 166.44.100.89] 10/31/2003 11:17:15 Q8ac30620009e0f1f Subject: Re[2]: our private photos qavqocoo And the other MiMail is of course old and has been blocked for days. (The following was yesterday's log) 10/30/2003 05:26:41 Qe75f19f7001edaa1 Scanner 1: Virus= the W32/[EMAIL PROTECTED] virus !!! Attachment=message.zip [13] I 10/30/2003 05:26:41 Qe75f19f7001edaa1 File(s) are INFECTED [ the W32/[EMAIL PROTECTED] virus !!!: 13] 10/30/2003 05:26:41 Qe75f19f7001edaa1 Deleting file with virus 10/30/2003 05:26:41 Qe75f19f7001edaa1 Deleting E-mail with virus! 10/30/2003 05:26:41 Qe75f19f7001edaa1 Scanned: CONTAINS A VIRUS [MIME: 2 23534] 10/30/2003 05:26:41 Qe75f19f7001edaa1 From: [Forged] To: [EMAIL PROTECTED] [incoming from 63.107.174.32] 10/30/2003 05:26:41 Qe75f19f7001edaa1 Subject: your account rekrncen Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 http://www.HM-Software.com/ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Hickey Sent: Friday, October 31, 2003 11:40 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] New Virus - MiMail.C - spreading fast We started seeing these are 8am this morning The attachment comes as photos.zip and so far neither Mcafee or F-prot is catching them. From: james@<current domain> (The from address may be spoofed to appear that it is coming from the current domain) - our had knox.edu there. Subject: Re[2]: our private photos Message: Hello Dear!, Finally i've found possibility to right u, my lovely girl :) All our photos which i've made at the beach (even when u're without ur bh:)) photos are great! This evening i'll come and we'll make the best SEX :) Right now enjoy the photos. Kiss, James. Attachment: photos.zip I added BANNAME PHOTOS.zip to my virus.cfg file....until the av software updates Don Hickey --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
