Dec 29
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kocok@xxx
Subject: Merry Christmas!
MessageID: 6253D1DD325
Report: ClamAV: link.postcard.php3508.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukir@xxx
Subject: Merry Christmas!
MessageID: 9D0501DD326
Report: ClamAV: link.postcard.htm0143.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: voma@xxx
Subject: Fw: Merry Christmas!
MessageID: 3AB0F1DD325
Report: ClamAV: postcard.christmas.jpg2187.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2187.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: safi@xxx
Subject: Merry Christmas!
MessageID: 1AA7E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7318.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.jpg7318.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rake@xxx
Subject: Merry Christmas!
MessageID: 614421DD325
Report: ClamAV: postcard.jpg0304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mikuma@xxx
Subject: Merry Christmas!
MessageID: D26051DD325
Report: ClamAV: postcard.christmas.jpg4511.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wenon@xxx
Subject: Merry Christmas!
MessageID: 8ADCA1DD326
Report: ClamAV: postcard.index.htm5141.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.htm5141.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fimepub@xxx
Subject: Merry Christmas!
MessageID: 299531DD325
Report: ClamAV: link.postcard.index.php3785.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: olukid@xxx
Subject: Merry Christmas!
MessageID: 95E571DD325
Report: ClamAV: link.postcard.index.php7865.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: emupiv@xxx
Subject: Fw: Merry Christmas!
MessageID: 8353E1DD325
Report: ClamAV: link.postcard.jpg2274.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wirasa@xxx
Subject: Fw: Merry Christmas!
MessageID: 222B01DD325
Report: ClamAV: postcard.christmas.index.gif6236.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasu@xxx
Subject: Fw: Merry Christmas!
MessageID: B547F1DD325
Report: ClamAV: link.postcard.php2664.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suvek@xxx
Subject: Merry Christmas!
MessageID: 3CCD01DD325
Report: ClamAV: postcard.index.gif3431.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vesi@xxx
Subject: Fw: Merry Christmas!
MessageID: 631281DD325
Report: ClamAV: postcard.christmas.index.htm4582.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm4582.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: irec@xxx
Subject: Re: Merry Christmas!
MessageID: 885431DD325
Report: ClamAV: postcard.christmas.gif0837.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif0837.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: datamic@xxx
Subject: Re: Merry Christmas!
MessageID: E434C1DD325
Report: ClamAV: postcard.christmas.index.htm0768.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uvev@xxx
Subject: Re: Merry Christmas!
MessageID: A975B1DD325
Report: ClamAV: postcard.christmas.gif1134.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duzir@xxx
Subject: Fw: Merry Christmas!
MessageID: 19FDB1DD325
Report: ClamAV: link.postcard.index.jpg1747.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zopo@xxx
Subject: Re: Merry Christmas!
MessageID: 035361DD325
Report: ClamAV: link.postcard.christmas.index.htm3674.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ikiw@xxx
Subject: Merry Christmas!
MessageID: 221D51DD325
Report: ClamAV: postcard.christmas.index.php3876.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cofaj@xxx
Subject: Merry Christmas!
MessageID: D2B1F1DD325
Report: ClamAV: postcard.christmas.jpg0317.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg0317.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rotu@xxx
Subject: Re: Merry Christmas!
MessageID: 671FF1DD325
Report: ClamAV: link.postcard.index.php6704.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ipacafa@xxx
Subject: Merry Christmas!
MessageID: 99F271DD325
Report: ClamAV: link.postcard.index.htm4406.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uloh@xxx
Subject: Merry Christmas!
MessageID: D31F91DD325
Report: ClamAV: link.postcard.christmas.php2621.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: todu@xxx
Subject: Fw: Merry Christmas!
MessageID: B9B1B1DD325
Report: ClamAV: link.postcard.christmas.index.jpg4734.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg4734.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jize@xxx
Subject: Re: Merry Christmas!
MessageID: 5BEA01DD325
Report: ClamAV: link.postcard.christmas.php7607.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php7607.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: atiu@xxx
Subject: Merry Christmas!
MessageID: F0FA91DD325
Report: ClamAV: postcard.htm0871.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aligide@xxx
Subject: Merry Christmas!
MessageID: F1DF31DD325
Report: ClamAV: postcard.christmas.htm4000.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm4000.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: titi@xxx
Subject: Merry Christmas!
MessageID: B212C1DD325
Report: ClamAV: link.postcard.christmas.index.jpg5631.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cadu@xxx
Subject: Fw: Merry Christmas!
MessageID: 929BB1DD325
Report: ClamAV: link.postcard.index.gif7105.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iheca@xxx
Subject: Merry Christmas!
MessageID: E11EF1DD325
Report: ClamAV: postcard.christmas.jpg4406.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg4406.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vate@xxx
Subject: Fw: Merry Christmas!
MessageID: 900A91DD325
Report: ClamAV: postcard.christmas.gif5304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cume@xxx
Subject: Fw: Merry Christmas!
MessageID: F13A71DD325
Report: ClamAV: postcard.php1417.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wilizis@xxx
Subject: Merry Christmas!
MessageID: 1FA001DD325
Report: ClamAV: link.postcard.christmas.index.php0436.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fazepi@xxx
Subject: Merry Christmas!
MessageID: 0B9D61DD325
Report: ClamAV: postcard.index.htm7866.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vedi@xxx
Subject: Re: Merry Christmas!
MessageID: 8B3611DD325
Report: ClamAV: postcard.jpg6277.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uuzuvuf@xxx
Subject: Fw: Merry Christmas!
MessageID: E0CF51DD325
Report: ClamAV: postcard.christmas.index.htm5628.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm5628.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cabas@xxx
Subject: Merry Christmas!
MessageID: 0FD6A1DD325
Report: ClamAV: postcard.christmas.index.jpg2280.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.jpg2280.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemevez@xxx
Subject: Merry Christmas!
MessageID: 611811DD325
Report: ClamAV: link.postcard.php0218.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rulu@xxx
Subject: Merry Christmas!
MessageID: 483251DD325
Report: ClamAV: link.postcard.index.jpg6852.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: imiw@xxx
Subject: Fw: Merry Christmas!
MessageID: 85C9D1DD325
Report: ClamAV: postcard.christmas.index.gif0653.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sufa@xxx
Subject: Re: Merry Christmas!
MessageID: 25FF91DD325
Report: ClamAV: link.postcard.index.htm5130.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.htm5130.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iude@xxx
Subject: Re: Merry Christmas!
MessageID: 28EA31DD325
Report: ClamAV: link.postcard.index.jpg1323.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg1323.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fovo@xxx
Subject: Merry Christmas!
MessageID: 99F301DD325
Report: ClamAV: link.postcard.php5370.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php5370.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: biver@xxx
Subject: Merry Christmas!
MessageID: 0D81A1DD325
Report: ClamAV: postcard.christmas.jpg0880.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ediz@xxx
Subject: Re: Merry Christmas!
MessageID: 30AA31DD325
Report: ClamAV: postcard.christmas.index.gif4823.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.gif4823.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poma@xxx
Subject: Fw: Merry Christmas!
MessageID: 9BB2A1DD325
Report: ClamAV: link.postcard.christmas.htm3106.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm3106.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: beji@xxx
Subject: Merry Christmas!
MessageID: B7A061DD325
Report: ClamAV: postcard.jpg1742.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.jpg1742.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jidi@xxx
Subject: Re: Merry Christmas!
MessageID: E6CDB1DD325
Report: ClamAV: link.postcard.christmas.php2313.zip contains Worm.Zafi.D