Bret Hughes staggered into view and mumbled:
> I could have sworn I got two today that were
> not flagged by mailscanner  and look legit.  Who knows?

A rather interesting thing about these viruses is that they all seem to have a header 
that says
X-Mailscanner: Found to be clean

I suspect this is just another attemp to make it look real even though it's a virus.  
The really bad thing is that it is 
really hard, once you know this header is there and it is faked, to actually see this 
or any other header in messages 
when viewing them with MS outlook related products.  The sad thing is that some 
unsuspecting Outlook user may actually 
think this is a real "returned mail failed delivery" message and may actually open the 
attachment to get details and fry 
his/her computer or network.  I can't believe how absolutely real these messages look 
accept, of course, for the 
X-Mailscanner header, which I had seen before in a file that was reported later to 
have contained a virus.  Wow!  I'm 
just glad I wasn't using Outlook/Outlook Express to view those messages.  (Or Windows 
for that matter.)

Lorenzo Prince
happy Shrike user ;)


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to