Re: [Fwd: [SLUG] {Filename?} Re: read it immediately]

From: Ian Blenke (icblenke@nks.net)
Date: Sun May 23 2004 - 13:04:56 EDT


Richard S. Smoot wrote:

> This is the second message roadrunner said had suspicious attachments
> that they have blocked from the group this morning!
>
> Richard
>
>This is a message from the MailScanner E-Mail Virus Protection Service
>----------------------------------------------------------------------
>The original e-mail attachment "file.pif"
>is on the list of unacceptable attachments for this site and has been
>replaced by this warning message.
>
>If you wish to receive a copy of the original attachment, please
>e-mail helpdesk and include the whole of this message
>in your request. Alternatively, you can call them, with
>the contents of this message to hand when you call.
>
>At Sun May 23 00:34:31 2004 the virus scanner said:
> Shortcuts to MS-Dos programs are very dangerous in email (file.pif)
> No programs allowed (file.pif)
>
>Note to Help Desk: Look on NKS MailAssistant in /data/mailassistant/spool/nks.net/quarantine/20040523 (message i4N4WW3e010431).
>
>
 From the minimal headers in your forwarded email, it "looks like"
mark@bish.net was the source of an email worm (which I'm not buying).
That is a valid slug list subscriber - I'm assuming the worm in question
sent mail using his email address. Can you forward me the full message
headers?

The attachment was caught by our MailAssistant: it's a 29568 byte
executable masquerading as a .pif file.

So RoadRunner is blocking mail to you that we've marked and cleaned as a
message containing a potential virus attachment? How do they "block" the
message? I'm intrigued.

 - Ian C. Blenke <icblenke@nks.net> <ian@blenke.com>
Director of Service Delivery - Networked Knowledge Systems

-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:50:32 EDT