> Benjamin J. Weiss pravi:
>>What are the subject lines?  I'm curious if we're talking about the same
>>email....
>>
>>Ben
>>
> we are talking about mail that looks like very convincing message from
> MS with an exe file attached. Subject are different: Latest net update,
> Security patch for MS, etc.

I've had MailScanner/F-Prot/ClamAV/Trend filtering out all of these.  I've
received somewhere close to 100 on my home server since Firday.  The
messages I get are:


The following e-mail messages were found to have viruses in them:

    Sender: [EMAIL PROTECTED]
IP Address: 208.38.58.58
 Recipient: [EMAIL PROTECTED]
   Subject: Newest Net Security Update
 MessageID: h8MJLiom004304
    Report: ClamAV: patch.exe contains Worm.Gibe.F
            F-Prot:
/var/spool/MailScanner/incoming/30420/h8MJLiom004304/patch.exe
Infection: W32/[EMAIL PROTECTED]
            Trend: Found virus WORM_SWEN.A in file ./h8MJLiom004304/patch.exe
            MailScanner: Executable DOS/Windows programs are dangerous in
email (patch.exe)
            No programs allowed (patch.exe)



This message just arrived.  As you can see all three scanners +
MailScanner flagged the problem.  I don't understand why your install is
missing any of these???


Gerry


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to