I just check the D*.SMD file and it appears to have an atatchment content-type=application/x-msdwonload;name="qnlc.exe" followed by attachment info.
On Friday, September 19, 2003 11:18 AM, John Tolmachoff <[EMAIL PROTECTED]> wrote: >I have seen a couple of those. > >If you look at the body, the attachment is not actually there, although the >mime header for it is. > >John Tolmachoff MCSE CSSA >Engineer/Consultant >eServices For You >www.eservicesforyou.com > > >> -----Original Message----- >> From: [EMAIL PROTECTED] [mailto:Declude.Virus- >> [EMAIL PROTECTED] On Behalf Of Bob McGregor >> Sent: Friday, September 19, 2003 10:01 AM >> To: Declude-List >> Subject: [Declude.Virus] Question on banned attachemnt >> >> I am receiving Swen to my e-mail address this morning as well as some >messages >> that are being banned due to e x e attachments. The subject has similar >names as >> the what Swen is catching. >> >> I am wondering if others are seeing this behavior as well? >> >> bob >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.Virus mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.Virus". The archives can be found >> at http://www.mail-archive.com. > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus". The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
