Quoting vlad <[EMAIL PROTECTED]>:
> > # more /var/virusmails/virus-20040113-120704-22122-02 > Return-Path: <[EMAIL PROTECTED]> > Delivered-To: virus-quarantine > X-Envelope-To: <[EMAIL PROTECTED]> > X-Envelope-From: <[EMAIL PROTECTED]> > X-Quarantine-id: <virus-20040113-120704-22122-02> > Received: from localhost (172-122.static.alkar.net [195.248.172.122]) > by myhost.ru (Postfix) with SMTP id E4D3413963 > for <[EMAIL PROTECTED]>; Tue, 13 Jan 2004 12:06:14 +0500 (YEKT) > From: "PayPal.com" <[EMAIL PROTECTED]> > To: User <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > X-Priority: 1 (High) > Subject: IMPORTANT kaakrair > MIME-Version: 1.0 > Content-Type: multipart/mixed; boundary="----------675053470039030" > Message-Id: <[EMAIL PROTECTED]> > Date: Tue, 13 Jan 2004 12:06:14 +0500 (YEKT) > X-AMaViS-Alert: INFECTED, message contains virus: Worm.Mimail.J > X-Amavis-Alert: BANNED FILENAME, message contains part named: > www.paypal.com.pif > Thats a different message I think. This one: ---------------- From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: PAYPAL.COM NEW YEAR OFFER Date: Wed, 14 Jan 2004 04:16:26 -0500 ** GREAT NEW YEAR OFFER FROM PAYPAL.COM ** Dear PayPal.com Member, etc.. ---------------- Contains a zip'ed exe that is a Downloader and currently downloads Mimail.P I hear. -trog ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
