>It was my understanding that BadTrans arrived as an attachment.
Yes and no. It's an attachment, but not really an attachment. It's an attachment with an ID so that it can automatically be started by the HTML that is in the E-mail. >Now I'm hearing that messages with no text, no attachment, and >from-address beginning with "_" are Badtrans messages. That's pretty much true. It's sent as a seemingly blank HTML E-mail, but it references the .WAV attachment, so most mail clients won't show the attachment. >My Declude/FProt is allowing these to be delivered. Why would this happen? >Anyting I can do about it. How would BadTrans be activated in these messages? That's because you haven't updated your virus definitions lately (the virus was first discovered last Saturday). You should make sure that you are running F-Prot v3.11a, and using the latest virus definitions (available at http://www.f-prot.com ). -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
