well, after making sure all defs were the latest and running it thru a few scan
engines to make sure virus was not
detected, i couldn't resist so i went out to dos and used a regular text editor to
open it. here was the contents, it
appears that whoever sent the original message sent the virus and their own mail
server removed it before actually
sending it out, and just made the attachment the same name as the original adding the
additional .txt extension, i made
a mistake on the original post i made here with the filename which was
humor.mp3.scr.txt, which of course i recognised
as the badtrans variety which is what my concern was, only later did i realise that
all the actual virus' did not have
the .txt part of the extension
anyway here was the message contained in the file, there was also some contact
information from the sending program at
the end which i have removed.
thanks for your offers and replies, I will keep those on hand for future reference
Don
*****************************************************************
VIRUS INFECTED FILE REMOVED
---------------------------
Dear User,
The attachment you received was infected with a virus and has
been removed. You may want to contact the sender to notify them
of the situation.
This e-mail is no longer infected.
Filename: Humor.MP3.scr
Virus name: W32/BadTrans@MM
*****************************************************************
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
