A soccer club sent an email regarding the location of soccer practice. Declude appeared to catch it because of a yahoo map link to the soccer fields. It would seem to be a common practice for someone to use a map link for directions. Copy of logfile below.
How do we prevent this from happening in the future? I do not have any clout with Yahoo so I doubt I could get them to change their nomenclature. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com 07/13/2004 11:22:49 Q1a685ae Scanned: Virus Free [MIME: 1 878] 07/13/2004 11:22:50 Q1a6a5ae MIME file: [text/html][quoted-printable; Length=7413 Checksum=565729] 07/13/2004 11:22:50 Q1a6a5ae MIME file: mp16_a.gif [base64; Length=195 Checksum=19772] 07/13/2004 11:22:50 Q1a6a5ae MIME file: mp16_b.gif [base64; Length=146 Checksum=17348] 07/13/2004 11:22:50 Q1a6a5ae MIME file: mp22_r.gif [base64; Length=442 Checksum=36673] 07/13/2004 11:22:50 Q1a6a5ae MIME file: mp22_l.gif [base64; Length=408 Checksum=31308] 07/13/2004 11:22:50 Q1a6a5ae Outlook 'Long Filename' Vulnerability 07/13/2004 11:22:50 Q1a6a5ae MIME file: overviewmap_OVMAPDATA=Ypg91eR32XWTWSco9NwX6snk0KVRpsRh.tpax9mLk [base64; Length=21737 Checksum=2421076] 07/13/2004 11:22:50 Q1a6a5ae MIME file: overviewmap_OVMAPData=Ypg91eR32XWTWSco9NwX6snk0KVRpsRh.tpax9mLk [base64; Length=9059 Checksum=925358] 07/13/2004 11:22:51 Q1a6a5ae File(s) are INFECTED [[Outlook 'Long Filename' Vulnerability]: 0] 07/13/2004 11:22:51 Q1a6a5ae Scanned: CONTAINS A VIRUS [MIME: 8 42955] 07/13/2004 11:22:51 Q1a6a5ae From: [Email Protected] To: [Email Protected] [incoming from 208.158.64.2] 07/13/2004 11:22:51 Q1a6a5ae Subject: FW: Training Week of July 12th 07/13/2004 11:22:52 Q1a6b5ae Warning: EOF in middle of MIME segment [] [--= Multipart Boundary 93821.2] 07/13/2004 11:22:52 Q1a6b5ae WARNING: EOF in multipart processing. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
