Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jibo@xxx
Subject: Merry Christmas!
MessageID: B043E1DD325
Report: ClamAV: postcard.christmas.index.htm5412.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukam@xxx
Subject: Merry Christmas!
MessageID: 631441DD325
Report: ClamAV: postcard.index.jpg0477.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg0477.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: detoge@xxx
Subject: Merry Christmas!
MessageID: 77BD81DD325
Report: ClamAV: postcard.index.gif7044.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vugifod@xxx
Subject: Merry Christmas!
MessageID: 4FB4B1DD325
Report: ClamAV: postcard.christmas.index.jpg6605.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: otar@xxx
Subject: Merry Christmas!
MessageID: 006D61DD325
Report: ClamAV: postcard.christmas.index.jpg6686.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.jpg6686.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zuvev@xxx
Subject: Merry Christmas!
MessageID: D7FD61DD325
Report: ClamAV: postcard.index.jpg0110.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: parob@xxx
Subject: Re: Merry Christmas!
MessageID: DF4251DD325
Report: ClamAV: postcard.index.php6138.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lehu@xxx
Subject: Merry Christmas!
MessageID: A05381DD325
Report: ClamAV: link.postcard.index.gif7717.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.gif7717.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tovol@xxx
Subject: Re: Merry Christmas!
MessageID: A768E1DD325
Report: ClamAV: link.postcard.index.gif1184.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vide@xxx
Subject: Fw: Merry Christmas!
MessageID: 5ACD61DD325
Report: ClamAV: link.postcard.htm7333.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: etofauf@xxx
Subject: Merry Christmas!
MessageID: 816501DD325
Report: ClamAV: postcard.christmas.php1046.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jibetin@xxx
Subject: Merry Christmas!
MessageID: A6ED71DD325
Report: ClamAV: postcard.htm5057.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wate@xxx
Subject: Re: Merry Christmas!
MessageID: 9CA181DD326
Report: ClamAV: postcard.jpg8518.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg8518.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuune@xxx
Subject: Re: Merry Christmas!
MessageID: DAA901DD325
Report: ClamAV: link.postcard.christmas.index.gif5246.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: beduu@xxx
Subject: Merry Christmas!
MessageID: CC81F1DD325
Report: ClamAV: link.postcard.christmas.index.jpg1628.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tijo@xxx
Subject: Fw: Merry Christmas!
MessageID: A1EF01DD325
Report: ClamAV: postcard.gif6424.zip contains Worm.Zafi.D
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 7B0CA1DD325
Report: ClamAV: Cat.scr contains Worm.Bagle.AG
MailScanner: Windows Screensavers are often used to hide viruses (Cat.scr)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zane@xxx
Subject: Fw: Merry Christmas!
MessageID: 0FB631DD325
Report: ClamAV: postcard.jpg4038.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg4038.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ehod@xxx
Subject: Fw: Merry Christmas!
MessageID: 5C2C41DD325
Report: ClamAV: postcard.php3476.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.php3476.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucuk@xxx
Subject: Re: Merry Christmas!
MessageID: 497821DD325
Report: ClamAV: postcard.christmas.gif6320.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.gif6320.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: saped@xxx
Subject: Merry Christmas!
MessageID: 6312E1DD325
Report: ClamAV: postcard.christmas.jpg1526.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zehe@xxx
Subject: Fw: Merry Christmas!
MessageID: 655241DD325
Report: ClamAV: postcard.christmas.jpg1613.zip contains Worm.Zafi.D
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 8A1061DD325
Report: ClamAV: foto1.zip contains Worm.Bagle.Gen-zippwd
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mohe@xxx
Subject: Fw: Merry Christmas!
MessageID: E8C841DD325
Report: ClamAV: postcard.christmas.php8235.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php8235.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coluf@xxx
Subject: Re: Merry Christmas!
MessageID: CBC5B1DD325
Report: ClamAV: link.postcard.gif1524.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hufa@xxx
Subject: Merry Christmas!
MessageID: 1FE361DD325
Report: ClamAV: postcard.index.htm6774.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: luji@xxx
Subject: Merry Christmas!
MessageID: D10B81DD325
Report: ClamAV: link.postcard.christmas.jpg8231.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vociliw@xxx
Subject: Re: Merry Christmas!
MessageID: C33261DD325
Report: ClamAV: link.postcard.htm6502.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lafesiw@xxx
Subject: Re: Merry Christmas!
MessageID: 2A66B1DD325
Report: ClamAV: link.postcard.christmas.index.htm7348.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zamu@xxx
Subject: Merry Christmas!
MessageID: 95E651DD325
Report: ClamAV: postcard.christmas.index.jpg2113.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lepou@xxx
Subject: Merry Christmas!
MessageID: 4B3DC1DD325
Report: ClamAV: postcard.php1023.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pirer@xxx
Subject: Merry Christmas!
MessageID: 6D2841DD325
Report: ClamAV: link.postcard.gif4208.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poba@xxx
Subject: Fw: Merry Christmas!
MessageID: 7F1641DD325
Report: ClamAV: postcard.christmas.htm7263.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm7263.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: etegifo@xxx
Subject: Merry Christmas!
MessageID: 1EB3E1DD326
Report: ClamAV: link.postcard.gif1571.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dupofam@xxx
Subject: Fw: Merry Christmas!
MessageID: A6F701DD325
Report: ClamAV: link.postcard.index.jpg2827.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.jpg2827.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fali@xxx
Subject: Merry Christmas!
MessageID: 849B61DD325
Report: ClamAV: postcard.christmas.jpg1854.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: soto@xxx
Subject: Merry Christmas!
MessageID: 250F31DD325
Report: ClamAV: link.postcard.index.htm3047.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gakoba@xxx
Subject: Merry Christmas!
MessageID: C803E1DD325
Report: ClamAV: link.postcard.christmas.index.htm3072.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm3072.bat)
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: AC0C61DD325
Report: ClamAV: foto3.exe contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (foto3.exe)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gazi@xxx
Subject: Merry Christmas!
MessageID: 752FE1DD325
Report: ClamAV: link.postcard.index.php5728.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rawejek@xxx
Subject: Merry Christmas!
MessageID: 9F75C1DD325
Report: ClamAV: postcard.christmas.index.php5870.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vowe@xxx
Subject: Merry Christmas!
MessageID: 0E7371DD325
Report: ClamAV: postcard.index.htm6432.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rizela@xxx
Subject: Re: Merry Christmas!
MessageID: 245AC1DD325
Report: ClamAV: link.postcard.index.jpg6341.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: euni@xxx
Subject: Merry Christmas!
MessageID: 63C4F1DD325
Report: ClamAV: postcard.index.php0413.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugis@xxx
Subject: Merry Christmas!
MessageID: 70B8E1DD325
Report: ClamAV: link.postcard.index.php3055.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujab@xxx
Subject: Merry Christmas!
MessageID: A16DB1DD325
Report: ClamAV: postcard.htm2616.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.htm2616.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kifi@xxx
Subject: Merry Christmas!
MessageID: BEC7E1DD325
Report: ClamAV: link.postcard.jpg4743.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: muku@xxx
Subject: Fw: Merry Christmas!
MessageID: 1E6DF1DD325
Report: ClamAV: link.postcard.htm1626.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.htm1626.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utates@xxx
Subject: Merry Christmas!
MessageID: 284831DD325
Report: ClamAV: link.postcard.christmas.index.htm6422.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mimu@xxx
Subject: Merry Christmas!
MessageID: DB0A81DD325
Report: ClamAV: link.postcard.christmas.jpg7033.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lasu@xxx
Subject: Fw: Merry Christmas!
MessageID: 0C6621DD325
Report: ClamAV: postcard.christmas.index.jpg8007.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bowucam@xxx
Subject: Merry Christmas!
MessageID: 87B3E1DD325
Report: ClamAV: link.postcard.christmas.htm7802.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vowi@xxx
Subject: Merry Christmas!
MessageID: 610521DD325
Report: ClamAV: postcard.jpg1373.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg1373.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lufen@xxx
Subject: Fw: Merry Christmas!
MessageID: 5121C1DD325
Report: ClamAV: postcard.christmas.index.gif6027.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sicepa@xxx
Subject: Merry Christmas!
MessageID: 23A5C1DD325
Report: ClamAV: postcard.index.jpg2852.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wepe@xxx
Subject: Merry Christmas!
MessageID: 0AAA21DD325
Report: ClamAV: postcard.christmas.index.htm6612.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gede@xxx
Subject: Re: Merry Christmas!
MessageID: 536B01DD325
Report: ClamAV: postcard.htm1835.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm1835.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jiso@xxx
Subject: Merry Christmas!
MessageID: 9264F1DD325
Report: ClamAV: link.postcard.gif5583.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.gif5583.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uticuc@xxx
Subject: Fw: Merry Christmas!
MessageID: 1167A1DD325
Report: ClamAV: postcard.christmas.index.jpg7822.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wone@xxx
Subject: Merry Christmas!
MessageID: AF7E01DD325
Report: ClamAV: postcard.christmas.gif5018.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lamo@xxx
Subject: Re: Merry Christmas!
MessageID: 2A84E1DD325
Report: ClamAV: postcard.christmas.index.gif7180.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.gif7180.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ewif@xxx
Subject: Merry Christmas!
MessageID: AE1091DD325
Report: ClamAV: postcard.jpg8840.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poha@xxx
Subject: Fw: Merry Christmas!
MessageID: 19E431DD325
Report: ClamAV: postcard.index.php4533.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php4533.bat)
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: AAD501DD325
Report: ClamAV: foto3.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (foto3.cpl)
Posted by Samboy
at 12:01 AM WST
