I am seeing e-mail being caught with the Space Gap vulnerability. A user requested the file and upon investigating, it includes a scr or pif file.
Declude Virus log is showing a jpg or gif image. The first line of the body is a link to the ad site yimg.com to gif or jpg images on that site. The D file is 108kb in size. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
