Hello,
Unfortunately the virus you are receiving is the W32\Hybris.Gen virus and
the people who may be sending you this virus may not even be aware of it.
You can read the characteristics of this virus here:
http://vil.mcafee.com/dispVirus.asp?virus_k=98873. We have received it about
100 times on our server so far. The simplest solution is to filter it out
through the rules.ima file through subject, from, and body filters because
they seem to be the only consistent items with this virus. Hope this helps.
Later,
Kevin
----- Original Message -----
From: "Tim D" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, January 05, 2001 3:19 PM
Subject: [IMail Forum] Damn Virus
> I am not very good at tracking down spammers. Does any of the information
> contained in this header help track them down? It looks to me like they
are
> on UUNET directly and none of the other information is real?
>
> I just received a virus with the below listed header. This makes the 3rd
> time someone has tried to send me the same virus. This must be a popular
> one.
>
> Tim D
>
>
> Received: from doug [63.126.60.224] by noveltymail.com
> (SMTPD32-6.05) id A5AB7A013C; Fri, 05 Jan 2001 13:51:07 -0600
> From: Hahaha <[EMAIL PROTECTED]>
> Subject: Snowhite and the Seven Dwarfs - The REAL story!
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="--VEV856FC9UVWP2VW1YRK1"
> Message-Id: <200101051351191.SM00876@doug>
> X-RCPT-TO: <[EMAIL PROTECTED]>
> Date: Fri, 5 Jan 2001 13:51:10 -0600
> X-UIDL: 47
> Status: U
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
