It's a test Nessus does with the EICAR attachment via SMTP. 
EICAR is designed to trip antivirus scanners (but is not a virus), 
and the test attempts to help you determine if there is a virus 
scanner on the system being tested.

more than likely you, (or someone), has been scanning the host 
this mail was sent at with Nessus.


> Anybody else getting these emails? (eicar.com attachment was 
deleted
> by me)
> 
> I've received four messages (similar context, different 
attachments)
> on each of three/four occasions over the last several days.
> 
> Thoughts anyone?
> 
> ------------------------
> <snip>
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Organization: Nessus kabale
> MIME-Version: 1.0
> Subject: Nessus antivirus test 1: base64 attachment
> Content-Type: multipart/mixed; boundary="=-=-="
> Lines: 13
> Return-Path: [EMAIL PROTECTED]
> X-OriginalArrivalTime: 12 Sep 2002 01:14:32.0453 (UTC) 
FILETIME=[C01B2B50:01C259F9]
> 
> 
> > 
> > If you can read or execute the attachment, this means that you 
do not
> > have an antivirus, or that it was disabled.
> > 
> 
> ---------------End of Original Message-----------------
> 
> -
> [EMAIL PROTECTED]: general discussions about Nessus.
> * To unsubscribe, send a mail to [EMAIL PROTECTED] 
with
> "unsubscribe nessus" in the body.
> 
> 

___________________________________________________
http://www.cirt.net/
Home of Nikto
-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.

Reply via email to