Now that Darin has posted something similar I have to ask... If Norton caught something that wasn't actually there, then what is the 28.8 kb file it put in quarantine? Could the virus have come through as text which didn't show as an attachment?
This:
Most likely, the bounce message included something like "Original message follows:", followed by the original message. In this case, it's actually a text file, but Norton is improperly treating it as a MIME file (so it sees a virus that really isn't there).
explains what happened. Norton incorrectly took a 28.8K (actually, bigger than that, as encoding makes the size larger) segment of a text file and pretended it was an attachment. That's how it found it. It saw an attachment where there was none.
In other words, for a user to be infected, they would have to cut and paste the data from the body of the E-mail into a separate file, and run it through a MIME decoder. Even I do not know where you would find a MIME decoder to do that.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
