Could have been a zero byte file. I've seen a lot fo these with Netsky, though I thought they were all just empty zips.
Matt
Rodney Bertsch wrote:
If this has been covered in the list please give me a keyword to search the archives so I can look up the fix, if not we're open for suggestions to halt this problem.
We have declude 1.78i27 with the latest version of definitions for Innoculan. We've been catching tons of Netsky and others without a problem, until this one slipped through. Netsky spoofed our user's e-mail address as the sender and sent to [EMAIL PROTECTED] Amazon happily auto-responded with the full content of the e-mail and sent Netsky right into our users mailbox.
First of all, it doesn't look like the e-mail was scanned at all since it was a return message. Secondly it contained a .PIF file attachment, which we block. So it appears it slipped past both safety checks. Luckily Norton caught the virus at the desktop level.
Any help would be much appreciated.
Thanks,
Rodney Bertsch IS Coordinator Kirk NationaLease Co.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
