Dec 22
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jibo@xxx
Subject: Merry Christmas!
MessageID: B043E1DD325
Report: ClamAV: postcard.christmas.index.htm5412.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukam@xxx
Subject: Merry Christmas!
MessageID: 631441DD325
Report: ClamAV: postcard.index.jpg0477.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg0477.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: detoge@xxx
Subject: Merry Christmas!
MessageID: 77BD81DD325
Report: ClamAV: postcard.index.gif7044.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vugifod@xxx
Subject: Merry Christmas!
MessageID: 4FB4B1DD325
Report: ClamAV: postcard.christmas.index.jpg6605.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: otar@xxx
Subject: Merry Christmas!
MessageID: 006D61DD325
Report: ClamAV: postcard.christmas.index.jpg6686.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.jpg6686.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zuvev@xxx
Subject: Merry Christmas!
MessageID: D7FD61DD325
Report: ClamAV: postcard.index.jpg0110.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: parob@xxx
Subject: Re: Merry Christmas!
MessageID: DF4251DD325
Report: ClamAV: postcard.index.php6138.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lehu@xxx
Subject: Merry Christmas!
MessageID: A05381DD325
Report: ClamAV: link.postcard.index.gif7717.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.gif7717.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tovol@xxx
Subject: Re: Merry Christmas!
MessageID: A768E1DD325
Report: ClamAV: link.postcard.index.gif1184.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vide@xxx
Subject: Fw: Merry Christmas!
MessageID: 5ACD61DD325
Report: ClamAV: link.postcard.htm7333.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: etofauf@xxx
Subject: Merry Christmas!
MessageID: 816501DD325
Report: ClamAV: postcard.christmas.php1046.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jibetin@xxx
Subject: Merry Christmas!
MessageID: A6ED71DD325
Report: ClamAV: postcard.htm5057.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wate@xxx
Subject: Re: Merry Christmas!
MessageID: 9CA181DD326
Report: ClamAV: postcard.jpg8518.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg8518.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuune@xxx
Subject: Re: Merry Christmas!
MessageID: DAA901DD325
Report: ClamAV: link.postcard.christmas.index.gif5246.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: beduu@xxx
Subject: Merry Christmas!
MessageID: CC81F1DD325
Report: ClamAV: link.postcard.christmas.index.jpg1628.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tijo@xxx
Subject: Fw: Merry Christmas!
MessageID: A1EF01DD325
Report: ClamAV: postcard.gif6424.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 7B0CA1DD325
Report: ClamAV: Cat.scr contains Worm.Bagle.AG
MailScanner: Windows Screensavers are often used to hide viruses (Cat.scr)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zane@xxx
Subject: Fw: Merry Christmas!
MessageID: 0FB631DD325
Report: ClamAV: postcard.jpg4038.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg4038.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ehod@xxx
Subject: Fw: Merry Christmas!
MessageID: 5C2C41DD325
Report: ClamAV: postcard.php3476.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.php3476.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucuk@xxx
Subject: Re: Merry Christmas!
MessageID: 497821DD325
Report: ClamAV: postcard.christmas.gif6320.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.gif6320.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: saped@xxx
Subject: Merry Christmas!
MessageID: 6312E1DD325
Report: ClamAV: postcard.christmas.jpg1526.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zehe@xxx
Subject: Fw: Merry Christmas!
MessageID: 655241DD325
Report: ClamAV: postcard.christmas.jpg1613.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 8A1061DD325
Report: ClamAV: foto1.zip contains Worm.Bagle.Gen-zippwd


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mohe@xxx
Subject: Fw: Merry Christmas!
MessageID: E8C841DD325
Report: ClamAV: postcard.christmas.php8235.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php8235.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coluf@xxx
Subject: Re: Merry Christmas!
MessageID: CBC5B1DD325
Report: ClamAV: link.postcard.gif1524.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hufa@xxx
Subject: Merry Christmas!
MessageID: 1FE361DD325
Report: ClamAV: postcard.index.htm6774.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: luji@xxx
Subject: Merry Christmas!
MessageID: D10B81DD325
Report: ClamAV: link.postcard.christmas.jpg8231.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vociliw@xxx
Subject: Re: Merry Christmas!
MessageID: C33261DD325
Report: ClamAV: link.postcard.htm6502.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lafesiw@xxx
Subject: Re: Merry Christmas!
MessageID: 2A66B1DD325
Report: ClamAV: link.postcard.christmas.index.htm7348.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zamu@xxx
Subject: Merry Christmas!
MessageID: 95E651DD325
Report: ClamAV: postcard.christmas.index.jpg2113.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lepou@xxx
Subject: Merry Christmas!
MessageID: 4B3DC1DD325
Report: ClamAV: postcard.php1023.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pirer@xxx
Subject: Merry Christmas!
MessageID: 6D2841DD325
Report: ClamAV: link.postcard.gif4208.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poba@xxx
Subject: Fw: Merry Christmas!
MessageID: 7F1641DD325
Report: ClamAV: postcard.christmas.htm7263.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm7263.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: etegifo@xxx
Subject: Merry Christmas!
MessageID: 1EB3E1DD326
Report: ClamAV: link.postcard.gif1571.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dupofam@xxx
Subject: Fw: Merry Christmas!
MessageID: A6F701DD325
Report: ClamAV: link.postcard.index.jpg2827.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.jpg2827.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fali@xxx
Subject: Merry Christmas!
MessageID: 849B61DD325
Report: ClamAV: postcard.christmas.jpg1854.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: soto@xxx
Subject: Merry Christmas!
MessageID: 250F31DD325
Report: ClamAV: link.postcard.index.htm3047.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gakoba@xxx
Subject: Merry Christmas!
MessageID: C803E1DD325
Report: ClamAV: link.postcard.christmas.index.htm3072.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm3072.bat)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: AC0C61DD325
Report: ClamAV: foto3.exe contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (foto3.exe)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gazi@xxx
Subject: Merry Christmas!
MessageID: 752FE1DD325
Report: ClamAV: link.postcard.index.php5728.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rawejek@xxx
Subject: Merry Christmas!
MessageID: 9F75C1DD325
Report: ClamAV: postcard.christmas.index.php5870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vowe@xxx
Subject: Merry Christmas!
MessageID: 0E7371DD325
Report: ClamAV: postcard.index.htm6432.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rizela@xxx
Subject: Re: Merry Christmas!
MessageID: 245AC1DD325
Report: ClamAV: link.postcard.index.jpg6341.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: euni@xxx
Subject: Merry Christmas!
MessageID: 63C4F1DD325
Report: ClamAV: postcard.index.php0413.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugis@xxx
Subject: Merry Christmas!
MessageID: 70B8E1DD325
Report: ClamAV: link.postcard.index.php3055.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujab@xxx
Subject: Merry Christmas!
MessageID: A16DB1DD325
Report: ClamAV: postcard.htm2616.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.htm2616.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kifi@xxx
Subject: Merry Christmas!
MessageID: BEC7E1DD325
Report: ClamAV: link.postcard.jpg4743.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: muku@xxx
Subject: Fw: Merry Christmas!
MessageID: 1E6DF1DD325
Report: ClamAV: link.postcard.htm1626.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.htm1626.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utates@xxx
Subject: Merry Christmas!
MessageID: 284831DD325
Report: ClamAV: link.postcard.christmas.index.htm6422.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mimu@xxx
Subject: Merry Christmas!
MessageID: DB0A81DD325
Report: ClamAV: link.postcard.christmas.jpg7033.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lasu@xxx
Subject: Fw: Merry Christmas!
MessageID: 0C6621DD325
Report: ClamAV: postcard.christmas.index.jpg8007.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bowucam@xxx
Subject: Merry Christmas!
MessageID: 87B3E1DD325
Report: ClamAV: link.postcard.christmas.htm7802.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vowi@xxx
Subject: Merry Christmas!
MessageID: 610521DD325
Report: ClamAV: postcard.jpg1373.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg1373.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lufen@xxx
Subject: Fw: Merry Christmas!
MessageID: 5121C1DD325
Report: ClamAV: postcard.christmas.index.gif6027.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sicepa@xxx
Subject: Merry Christmas!
MessageID: 23A5C1DD325
Report: ClamAV: postcard.index.jpg2852.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wepe@xxx
Subject: Merry Christmas!
MessageID: 0AAA21DD325
Report: ClamAV: postcard.christmas.index.htm6612.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gede@xxx
Subject: Re: Merry Christmas!
MessageID: 536B01DD325
Report: ClamAV: postcard.htm1835.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm1835.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jiso@xxx
Subject: Merry Christmas!
MessageID: 9264F1DD325
Report: ClamAV: link.postcard.gif5583.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.gif5583.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uticuc@xxx
Subject: Fw: Merry Christmas!
MessageID: 1167A1DD325
Report: ClamAV: postcard.christmas.index.jpg7822.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wone@xxx
Subject: Merry Christmas!
MessageID: AF7E01DD325
Report: ClamAV: postcard.christmas.gif5018.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lamo@xxx
Subject: Re: Merry Christmas!
MessageID: 2A84E1DD325
Report: ClamAV: postcard.christmas.index.gif7180.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.gif7180.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ewif@xxx
Subject: Merry Christmas!
MessageID: AE1091DD325
Report: ClamAV: postcard.jpg8840.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poha@xxx
Subject: Fw: Merry Christmas!
MessageID: 19E431DD325
Report: ClamAV: postcard.index.php4533.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php4533.bat)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: AAD501DD325
Report: ClamAV: foto3.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (foto3.cpl)

Dec. 21
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: C9A3A1DD325
Report: ClamAV: Secret.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Secret.cpl)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: d01a8c0@xxx
Subject: Merry Christmas!
MessageID: AE7651DD325
Report: ClamAV: postcard.index.htm0447.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pidijuk@xxx
Subject: Merry Christmas!
MessageID: 120991DD325
Report: ClamAV: link.postcard.index.gif5050.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.gif5050.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fefo@xxx
Subject: Merry Christmas!
MessageID: 859BA1DD325
Report: ClamAV: link.postcard.index.jpg8166.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 31FB01DD325
Report: ClamAV: Doll.zip contains Worm.Bagle.Gen-zippwd


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: canes@xxx
Subject: Re: Merry Christmas!
MessageID: 05CE91DD325
Report: ClamAV: link.postcard.christmas.gif7253.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fumu@xxx
Subject: Fw: Merry Christmas!
MessageID: 561571DD325
Report: ClamAV: postcard.christmas.htm2056.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gipohok@xxx
Subject: Re: Merry Christmas!
MessageID: C28C51DD325
Report: ClamAV: link.postcard.php2247.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php2247.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pobe@xxx
Subject: Re: Merry Christmas!
MessageID: 55FE01DD325
Report: ClamAV: link.postcard.gif8163.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: homib@xxx
Subject: Fw: Merry Christmas!
MessageID: 70C1A1DD325
Report: ClamAV: link.postcard.christmas.htm3646.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nofozas@xxx
Subject: Merry Christmas!
MessageID: 070E81DD325
Report: ClamAV: link.postcard.jpg6525.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pesew@xxx
Subject: Re: Merry Christmas!
MessageID: BEB571DD325
Report: ClamAV: link.postcard.christmas.index.php3487.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: alup@xxx
Subject: Fw: Merry Christmas!
MessageID: E2FCB1DD325
Report: ClamAV: postcard.christmas.index.htm7067.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm7067.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ouza@xxx
Subject: Merry Christmas!
MessageID: 64C7C1DD325
Report: ClamAV: postcard.christmas.gif3564.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif3564.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: usef@xxx
Subject: Merry Christmas!
MessageID: 933561DD325
Report: ClamAV: postcard.index.jpg3728.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tedo@xxx
Subject: Re: Merry Christmas!
MessageID: 4E03D1DD325
Report: ClamAV: postcard.htm8706.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucez@xxx
Subject: Merry Christmas!
MessageID: C02EC1DD325
Report: ClamAV: postcard.index.htm6114.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.htm6114.pif)



Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: igic@xxx
Subject: Fw: Merry Christmas!
MessageID: 1CBB91DD325
Report: ClamAV: link.postcard.php6123.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php6123.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ovew@xxx
Subject: Merry Christmas!
MessageID: 4C9131DD325
Report: ClamAV: link.postcard.index.htm7076.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: onok@xxx
Subject: Re: Merry Christmas!
MessageID: 712891DD325
Report: ClamAV: postcard.christmas.htm7742.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ofav@xxx
Subject: Re: Merry Christmas!
MessageID: 784701DD325
Report: ClamAV: link.postcard.jpg1456.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: urapuwu@xxx
Subject: Fw: Merry Christmas!
MessageID: 1B0831DD325
Report: ClamAV: postcard.index.php8857.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jufa@xxx
Subject: Re: Merry Christmas!
MessageID: 790A21DD325
Report: ClamAV: postcard.index.gif0534.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tiri@xxx
Subject: Merry Christmas!
MessageID: ED7561DD325
Report: ClamAV: link.postcard.christmas.index.gif8714.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vejiuw@xxx
Subject: Fw: Merry Christmas!
MessageID: B766B1DD325
Report: ClamAV: postcard.christmas.index.jpg0185.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lametu@xxx
Subject: Fw: Merry Christmas!
MessageID: D1E031DD325
Report: ClamAV: postcard.php8036.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fawe@xxx
Subject: Fw: Merry Christmas!
MessageID: EC6601DD325
Report: ClamAV: link.postcard.christmas.htm7487.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm7487.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: heri@xxx
Subject: Fw: Merry Christmas!
MessageID: 4CFD81DD325
Report: ClamAV: link.postcard.gif6648.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.gif6648.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: refe@xxx
Subject: Merry Christmas!
MessageID: A35FF1DD325
Report: ClamAV: postcard.christmas.index.htm3850.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rikor@xxx
Subject: Re: Merry Christmas!
MessageID: 77B1B1DD325
Report: ClamAV: link.postcard.jpg4556.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tojeke@xxx
Subject: Merry Christmas!
MessageID: 791441DD325
Report: ClamAV: postcard.index.jpg2651.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg2651.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wifejih@xxx
Subject: Merry Christmas!
MessageID: C038B1DD325
Report: ClamAV: link.postcard.php1487.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php1487.bat)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 6F3951DD325
Report: ClamAV: Dog.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Dog.cpl)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fewit@xxx
Subject: Fw: Merry Christmas!
MessageID: 759E01DD325
Report: ClamAV: postcard.index.php2568.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fojef@xxx
Subject: Fw: Merry Christmas!
MessageID: 513491DD325
Report: ClamAV: link.postcard.christmas.php6074.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ifuw@xxx
Subject: Re: Merry Christmas!
MessageID: 3DB481DD325
Report: ClamAV: postcard.christmas.index.jpg0147.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utaz@xxx
Subject: Fw: Merry Christmas!
MessageID: F0F731DD325
Report: ClamAV: postcard.index.jpg4452.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ginu@xxx
Subject: Re: Merry Christmas!
MessageID: E83D21DD325
Report: ClamAV: postcard.christmas.index.gif7212.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif7212.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sivoke@xxx
Subject: Merry Christmas!
MessageID: B0E291DD325
Report: ClamAV: postcard.christmas.htm2785.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm2785.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wahe@xxx
Subject: Fw: Merry Christmas!
MessageID: ECB681DD325
Report: ClamAV: postcard.index.htm2771.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ohok@xxx
Subject: Merry Christmas!
MessageID: B825F1DD325
Report: ClamAV: postcard.christmas.index.php6350.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ikek@xxx
Subject: Merry Christmas!
MessageID: D39311DD325
Report: ClamAV: postcard.gif4743.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubotac@xxx
Subject: Re: Merry Christmas!
MessageID: 7E2F21DD325
Report: ClamAV: link.postcard.christmas.php7614.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuvecus@xxx
Subject: Fw: Merry Christmas!
MessageID: 05AA91DD325
Report: ClamAV: postcard.christmas.jpg1743.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.jpg1743.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: akoh@xxx
Subject: Re: Merry Christmas!
MessageID: E104D1DD325
Report: ClamAV: link.postcard.christmas.index.php6882.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php6882.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucafib@xxx
Subject: Fw: Merry Christmas!
MessageID: 596AD1DD325
Report: ClamAV: link.postcard.christmas.index.gif5151.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dumaka@xxx
Subject: Merry Christmas!
MessageID: 3257B1DD325
Report: ClamAV: postcard.christmas.jpg2157.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2157.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hoji@xxx
Subject: Fw: Merry Christmas!
MessageID: BB7C51DD325
Report: ClamAV: link.postcard.christmas.index.jpg1054.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg1054.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gagi@xxx
Subject: Merry Christmas!
MessageID: A45511DD325
Report: ClamAV: link.postcard.christmas.php8500.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.php8500.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jara@xxx
Subject: Merry Christmas!
MessageID: 6CE441DD325
Report: ClamAV: postcard.christmas.index.gif5634.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zuwepik@xxx
Subject: Fw: Merry Christmas!
MessageID: 77B6C1DD325
Report: ClamAV: postcard.christmas.htm1767.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm1767.pif)

Bugs
Topic: i-Solv Project
Been evaluating the first installment of i-Solv BCMS since Dec. 15, 2004.

Bugs:

1. BillingCollection
Run-time error Table 'sfelapco.feeder_Lup' doesn't exist. (should be lup, not Lup)

2. When CONSUMER Management is entered, NOTHING HAPPENS. (Linux MySQL-max server), but seems to work fine using Rico's MySQL server. EVEN with an *EMPTY* table! Same version: MySQL 4.0.21-max.

3. When adding consumers, "Run-time error '380': Invalid property value" occurs. (NEW exe only?)

4. Even when I use the 2.5 version of myodbc, no restore occurs on ibm using both NEW and OLD exe.

5. 4:44pm, 12/17/2004. tried OLD exe with myodbc 3.51.10 on SAMBOY, accessing RICO:

Restore: no data RESTORED. :-(

4:46pm, 12/17/2004. tried OLD exe with myodbc 2.5 on SAMBOY, accessing RICO:

Restore: still no DICE. :-(

6. 4:48pm, 12/17/2004. Rico tried OLD exe with myodbc 3.51.10 on RICO, accessing RICO, seems to wrok on LOCALHOST only.

7. installed mysql 4.0.21 on SAMBOY, OLD exe restored fine, using localhost

8. Saturday, 12/18/2004. 9:30am. Manually IMPORTED data using MySQL Query Browser. Tried to do ALL files at once, but it won't let me. It said the syntax was not valid/supported. Same with mysql-front. So I did it line by line (file by file) and it worked.

9. But Consumer Management using the LINUX server still won't work. I'm guessing this is *ONLY* a CASE problem (uppercase, lowercase), just like some of the errors I'm getting, but that's a little far-fetched.

Dec 20
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 9AA711DD325
Report: ClamAV: foto3.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (foto3.com)

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 1E2331DD325
Report: ClamAV: Cat.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Cat.cpl)

Dec 17
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: BEBDB1DD326
Report: ClamAV: Secret.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Secret.cpl)

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 63C5B1DD325
Report: ClamAV: Garry.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (Garry.com)

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 7F3E01DD325
Report: ClamAV: Secret.scr contains Worm.Bagle.AG
MailScanner: Windows Screensavers are often used to hide viruses (Secret.scr)

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: D2CEC1DD325
Report: ClamAV: Fish.scr contains Worm.Bagle.AG
MailScanner: Windows Screensavers are often used to hide viruses (Fish.scr)

Dec 16
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: E94E31DD325
Report: ClamAV: foto2.zip contains Worm.Bagle.Gen-zippwd

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Re: Merry Christmas!
MessageID: 907C71DD325
Report: ClamAV: postcard.christmas.php8468.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.php8468.pif)

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Merry Christmas!
MessageID: 2022E1DD325
Report: ClamAV: postcard.index.gif2444.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.gif2444.cmd)

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Re: Merry Christmas!
MessageID: F1C411DD325
Report: ClamAV: link.postcard.jpg7120.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.jpg7120.cmd)

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Merry Christmas!
MessageID: C2A7B1DD325
Report: ClamAV: link.postcard.index.jpg3510.zip contains Worm.Zafi.D

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Merry Christmas!
MessageID: D6B8E1DD325
Report: ClamAV: link.postcard.php0780.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php0780.cmd)

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Fw: Merry Christmas!
MessageID: A93551DD325
Report: ClamAV: postcard.index.htm5642.zip contains Worm.Zafi.D

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Fw: Merry Christmas!
MessageID: 74DB51DD325
Report: ClamAV: postcard.christmas.htm0632.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm0632.bat)

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Merry Christmas!
MessageID: D38801DD325
Report: ClamAV: postcard.christmas.index.htm4781.zip contains Worm.Zafi.D

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Merry Christmas!
MessageID: 87FE31DD325
Report: ClamAV: postcard.htm3137.zip contains Worm.Zafi.D

Sender: myla@comclark.com
IP Address: 202.69.190.243
Subject: Merry Christmas!
MessageID: 7E1E01DD325
Report: ClamAV: postcard.christmas.htm5000.zip contains Worm.Zafi.D

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 5D3FC1DD325
Report: ClamAV: Cat.zip contains Worm.Bagle.Gen-zippwd

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 6A1B31DD325
Report: ClamAV: Fish.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Fish.cpl)

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 4FB341DD325
Report: ClamAV: foto1.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (foto1.com)

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: CBF201DD325
Report: ClamAV: foto2.zip contains Worm.Bagle.Gen-zippwd

Dec 15
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 458051DD325
Report: ClamAV: foto1.zip contains Worm.Bagle.Gen-zippwd

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 475CD1DD325
Report: ClamAV: Doll.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Doll.cpl)

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: D2B921DD325
Report: ClamAV: Secret.scr contains Worm.Bagle.AG
MailScanner: Windows Screensavers are often used to hide viruses (Secret.scr)

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: C4F5E1DD325
Report: ClamAV: foto2.exe contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (foto2.exe)

Dec. 13
Topic: Viruses

The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: A9F521DD325
Report: ClamAV: Fish.zip contains Worm.Bagle.Gen-zippwd

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 231A71DD325
Report: ClamAV: Secret.scr contains Worm.Bagle.AG
MailScanner: Windows Screensavers are often used to hide viruses (Secret.scr)

Greenville PC
Topic: work
Spent 4.5 hours:

1. Cleaning the inside of the Casing (even opened up the power supply to clean it inside)

2. Installing the O.S. and applying the latest patch

3. Installing various essential software.

I am not sure if there are some things that need to be done for it to be restored to its working state.

Dec. 10
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 24E601DD325
Report: ClamAV: foto2.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (foto2.com)

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 4D5CD1DD325
Report: ClamAV: Garry.zip contains Worm.Bagle.Gen-zippwd

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 6D5C61DD325
Report: ClamAV: Cat.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (Cat.com)

Sender: 5d4371@roxette.org
IP Address: 61.106.200.145
Subject: SunTrust Bank Fraud Verification Process
MessageID: 1ADBF1DD325
Report: ClamAV: msg-22591-7.html contains HTML.Phishing.Bank-1

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Subject: Re:
MessageID: 69CA81DD325
Report: ClamAV: Garry.exe contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (Garry.exe)