> Lastfriday something very strange happened. A 2 GB mbx-file
> "JunkE-mail.mbx " appeared in one of the users' folders on the


> Anyoneany thoughts?


> Ihave the spool folder, tmp-file and mbx-file available in very
> small zips(somehow they compress very well! The 2 GB file compresses
> to 947 KB and the 80MB file compresses to 211 KB).

Maybe it's a compression Bomb, sorted out by a junkmail filter
You can create very small zip-files
which will deflate to very very huge files.
If  you  use a Virus scanner, which is checking ZIP attachemnts it can
run out of memeory or fill your disk with a temp file.
Some information about these bombs:
http://www.aerasec.de/security/advisories/decompression-bomb-vulnerability.html

ATTENTION  - DOWNLOAD THE FOLLOWING AT YOUR RISK ONLY (I did not check
the file or the source and it may kill your Virus-Scanner or system)
One example of a very huge CB is 42.zip  
http://mirror.delta5.com.br/2004/05/20/unforgettable.dk/
(42.374 bytes zipped) which expands to 4,5PB!


Matti

- 
Matti Haack - Hit Haack IT Service Gmbh
Neuburger Strasse 35, D-94032 Passau
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de



Ausgehende E-Mail wurde auf Viren gescannt
http://www.hit-gmbh.de

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to