I believe both messages came from the same person and I could add a filter to capture subsequent attempts and probably have a copy for you in a week or so unless someone else can come up with one sooner.
That would probably be very helpful.
BTW, I am blocking EXE files, so somehow this appears to be bypassing that unless Declude is unzipping whatever is being sent and then leaving the file behind. Declude of course is calling the file 1_1.exe.binhex and not just 1_1.exe like the actual file that is being left behind.
Actually, Declude Virus uses an .exe extension to ensure that the file will be scanned, because the BinHex encoding can include a different filename (but Declude Virus won't know what that is until after it starts the decoding, but Declude Virus needs to pick a file name before the decoding begins). In this case, it was really a .jpg file.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
