It's an html formatted mail which has an OBJECT DATA exploit in it. http://www.microsoft.com/technet/security/bulletin/MS03-032.mspx
Phil ---- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Pfefferkorn, Pete (pfeffepe) > Sent: 27 May 2004 15:03 > To: Exchange Discussions > Subject: Netsky-V questions and scanning > > I have an off topic question. I have a number of users who > have received messages and when they try and open, McAfee on > the desktop states that the Exploit-ObjectData has been > detected. Is this the Netsky.V virus which just contains a > link in the body? I'm curious why it would get through our > message virus scanning products (Sophos and Trend) or is this > a unknown variant and not the Netsky.V > > > -----Original Message----- > > From: McAfee E-mail Scan : > > Sent: Tuesday, May 25, 2004 3:25 PM > > Subject: Potentially unwanted message body detected, > entire message > > has been moved to quarantine folder~ > > > > McAfee E-mail Scan : Has detected potentially unwanted > e-mail message > > body. Virus name: Exploit-ObjectData Message was sent by : > Randy Ham > > Sender E-mail Address : [EMAIL PROTECTED] Carbon Copy to : None > > > Pete Pfefferkorn > Senior Systems Engineer/Mail Administrator University of Cincinnati > 51 Goodman Street > Cincinnati, OH 45221 > Phone - (513) 556-9076 > Fax - (513) 556-2042 > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t ext_mode=&lang=english > To unsubscribe send a blank email to > %%email.unsub%% > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
