Don't know if clamav gives it a different name, but my
postfix+amavisd+clamav+spamassassin configuration tagged this one as
originating at witango.com:
A virus was found: Worm.Mytob.Gen-4
A banned name was found:
P=p003,L=1,M=multipart/mixed |
P=p002,L=1/2,M=application/octet-stream,T=zip,N=email-doc.zip
| P=p004,L=1/2/1,T=exe,T=exe-ms,N=email-doc.htm
.exe
Scanner detecting a virus: Clam Antivirus-clamd
The mail originated from: <[EMAIL PROTECTED]>
First upstream SMTP client IP address: [202.173.130.130]
dsl-202-173-130-130.nsw.westnet.com.au
According to the 'Received:' trace, the message originated at:
[67.102.65.3]
witango.com ([67.102.65.3])
Notification to sender will not be mailed.
The message WAS NOT delivered to:
<[EMAIL PROTECTED]>:
550 5.7.1 Message content rejected, id=20284-04 - VIRUS:
Worm.Mytob.Gen-4
Virus scanner output:
p004: Worm.Mytob.Gen-4 FOUND
The message has been quarantined as:
virus-20050625-012322-20284-04
On Saturday, June 25, 2005, at 08:00 AM, Scott Cadillac wrote:
I got one too.
Fortunately my MDaemon Mail Server caught the Zip attachment.
Virus is Net-Worm.Win32.Mytob.bf.
Unfortunately, from what I can tell, it actually originated from the
Witango
Mail Server (202.173.130.130).
This could be really bad news.
~ Scott Cadillac
~ 403-254-5002
~ [EMAIL PROTECTED]
~ Custom Software for Business
http://custom.softwarefor.net
~ The XML-Extranet Partnership
~ P.O. Box 69006
RPO Bridlewood SW
Calgary, Alberta
Canada T2Y 4T9
-----Original Message-----
From: Wayne Irvine [mailto:[EMAIL PROTECTED]
Sent: Saturday, June 25, 2005 4:55 AM
To: [email protected]
Subject: Re: Witango-Talk: Important Notification
[EMAIL PROTECTED] at [EMAIL PROTECTED] wrote:
I do not understand what this is all about.
Please tell me
It is a spammer masquerading as WiTango support and sending
you (and me) a
virus. Fortunately I use Macs.
Wayne Irvine
Byte Services Pty Ltd
http://www.byteserve.com.au/
[EMAIL PROTECTED]
Ph 02 9960 6099 Mob 0409 960 609 Fax 02 9960 6088
______________________________________________________________
__________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
_______________________________________________________________________
_
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
