Dec 23
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: obar@xxx
Subject: Re: Merry Christmas!
MessageID: 1DC191DD325
Report: ClamAV: link.postcard.christmas.index.jpg7732.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jelat@xxx
Subject: Fw: Merry Christmas!
MessageID: EE2041DD325
Report: ClamAV: postcard.christmas.jpg3465.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.jpg3465.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gopim@xxx
Subject: Merry Christmas!
MessageID: 7F9401DD325
Report: ClamAV: postcard.christmas.php7831.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php7831.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: obosa@xxx
Subject: Merry Christmas!
MessageID: B63BB1DD325
Report: ClamAV: link.postcard.christmas.index.jpg0017.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg0017.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: itidake@xxx
Subject: Merry Christmas!
MessageID: BCE571DD325
Report: ClamAV: link.postcard.christmas.php5683.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suvor@xxx
Subject: Fw: Merry Christmas!
MessageID: 71CE71DD325
Report: ClamAV: postcard.index.htm1555.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: egabobi@xxx
Subject: Re: Merry Christmas!
MessageID: 4224D1DD325
Report: ClamAV: postcard.christmas.php3367.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.php3367.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aviu@xxx
Subject: Merry Christmas!
MessageID: 5133D1DD325
Report: ClamAV: link.postcard.jpg3684.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.jpg3684.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: imove@xxx
Subject: Merry Christmas!
MessageID: 1135B1DD325
Report: ClamAV: postcard.christmas.index.gif6034.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.gif6034.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: socu@xxx
Subject: Fw: Merry Christmas!
MessageID: 187601DD325
Report: ClamAV: postcard.christmas.gif6333.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: azuc@xxx
Subject: Merry Christmas!
MessageID: 6269B1DD325
Report: ClamAV: postcard.christmas.htm1535.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm1535.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dozumem@xxx
Subject: Merry Christmas!
MessageID: 5800D1DD325
Report: ClamAV: link.postcard.christmas.jpg7640.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gapo@xxx
Subject: Fw: Merry Christmas!
MessageID: 581DA1DD325
Report: ClamAV: link.postcard.christmas.index.php7802.zip contains Worm.Zafi.D
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 8BDB71DD325
Report: ClamAV: foto1.zip contains Worm.Bagle.Gen-zippwd
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uumi@xxx
Subject: Merry Christmas!
MessageID: 418761DD325
Report: ClamAV: link.postcard.gif5885.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: olar@xxx
Subject: Merry Christmas!
MessageID: F29241DD325
Report: ClamAV: link.postcard.jpg1584.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tato@xxx
Subject: Merry Christmas!
MessageID: 38B9D1DD325
Report: ClamAV: postcard.christmas.jpg4212.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ebemaud@xxx
Subject: Fw: Merry Christmas!
MessageID: EDAA91DD325
Report: ClamAV: postcard.christmas.php1872.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: teva@xxx
Subject: Merry Christmas!
MessageID: 3164D1DD326
Report: ClamAV: postcard.index.php6176.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: soki@xxx
Subject: Merry Christmas!
MessageID: E1F181DD325
Report: ClamAV: link.postcard.christmas.index.htm3263.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rugo@xxx
Subject: Fw: Merry Christmas!
MessageID: 8243D1DD325
Report: ClamAV: postcard.christmas.index.php6030.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zucu@xxx
Subject: Merry Christmas!
MessageID: 12F461DD325
Report: ClamAV: link.postcard.christmas.index.htm0840.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm0840.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fiho@xxx
Subject: Re: Merry Christmas!
MessageID: 729401DD325
Report: ClamAV: link.postcard.index.htm4403.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uriroso@xxx
Subject: Re: Merry Christmas!
MessageID: 1F4811DD325
Report: ClamAV: postcard.christmas.gif6376.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hime@xxx
Subject: Merry Christmas!
MessageID: 218DC1DD325
Report: ClamAV: postcard.christmas.index.htm8444.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pemuvu@xxx
Subject: Re: Merry Christmas!
MessageID: 5FE271DD325
Report: ClamAV: link.postcard.christmas.jpg7041.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: azac@xxx
Subject: Re: Merry Christmas!
MessageID: 3DDC91DD325
Report: ClamAV: postcard.christmas.index.jpg8044.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.jpg8044.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: berajam@xxx
Subject: Fw: Merry Christmas!
MessageID: 3CBDA1DD325
Report: ClamAV: postcard.christmas.index.php1261.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.php1261.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ipawa@xxx
Subject: Re: Merry Christmas!
MessageID: 164E11DD325
Report: ClamAV: link.postcard.christmas.jpg3253.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rudo@xxx
Subject: Fw: Merry Christmas!
MessageID: 3BE2C1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7672.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cawi@xxx
Subject: Fw: Merry Christmas!
MessageID: 7D17E1DD325
Report: ClamAV: postcard.christmas.jpg5307.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utamez@xxx
Subject: Fw: Merry Christmas!
MessageID: B7C301DD325
Report: ClamAV: postcard.christmas.gif8841.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif8841.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nulu@xxx
Subject: Merry Christmas!
MessageID: 19FE61DD325
Report: ClamAV: link.postcard.index.htm7555.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm7555.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: miwe@xxx
Subject: Merry Christmas!
MessageID: 1FBEB1DD325
Report: ClamAV: link.postcard.christmas.jpg6331.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.jpg6331.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ewuz@xxx
Subject: Fw: Merry Christmas!
MessageID: 689E11DD325
Report: ClamAV: link.postcard.christmas.php7616.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fita@xxx
Subject: Merry Christmas!
MessageID: EACA51DD325
Report: ClamAV: link.postcard.christmas.index.jpg5140.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: puja@xxx
Subject: Merry Christmas!
MessageID: EE7111DD325
Report: ClamAV: link.postcard.jpg8432.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pabe@xxx
Subject: Re: Merry Christmas!
MessageID: 11F321DD325
Report: ClamAV: link.postcard.christmas.index.php4276.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.php4276.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pile@xxx
Subject: Re: Merry Christmas!
MessageID: 811FB1DD325
Report: ClamAV: link.postcard.christmas.index.jpg6627.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: miwej@xxx
Subject: Merry Christmas!
MessageID: C58F21DD325
Report: ClamAV: postcard.gif5250.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ejehik@xxx
Subject: Fw: Merry Christmas!
MessageID: 7F8FA1DD325
Report: ClamAV: postcard.christmas.index.jpg3843.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vusica@xxx
Subject: Re: Merry Christmas!
MessageID: D55CC1DD325
Report: ClamAV: link.postcard.christmas.htm6206.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm6206.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vemi@xxx
Subject: Merry Christmas!
MessageID: BE1081DD325
Report: ClamAV: link.postcard.christmas.index.jpg7706.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.jpg7706.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: baho@xxx
Subject: Merry Christmas!
MessageID: 7C29B1DD325
Report: ClamAV: postcard.jpg4001.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg4001.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dopuz@xxx
Subject: Merry Christmas!
MessageID: F1BA91DD325
Report: ClamAV: postcard.christmas.index.htm6401.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gire@xxx
Subject: Fw: Merry Christmas!
MessageID: DEBF51DD325
Report: ClamAV: link.postcard.index.htm2825.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cimafo@xxx
Subject: Re: Merry Christmas!
MessageID: F1E791DD326
Report: ClamAV: link.postcard.christmas.gif1728.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif1728.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jera@xxx
Subject: Merry Christmas!
MessageID: 9F5E61DD325
Report: ClamAV: postcard.christmas.index.jpg2472.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ufekek@xxx
Subject: Merry Christmas!
MessageID: 6F89C1DD325
Report: ClamAV: postcard.christmas.jpg0031.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nica@xxx
Subject: Re: Merry Christmas!
MessageID: 708311DD325
Report: ClamAV: link.postcard.christmas.php4663.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mobu@xxx
Subject: Fw: Merry Christmas!
MessageID: 786341DD325
Report: ClamAV: postcard.index.jpg3422.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cosiuh@xxx
Subject: Re: Merry Christmas!
MessageID: 5B2751DD325
Report: ClamAV: postcard.christmas.jpg8041.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg8041.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eziu@xxx
Subject: Merry Christmas!
MessageID: 50E641DD325
Report: ClamAV: link.postcard.christmas.index.gif4631.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: viuco@xxx
Subject: Merry Christmas!
MessageID: AF7161DD325
Report: ClamAV: link.postcard.index.jpg5202.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ocez@xxx
Subject: Fw: Merry Christmas!
MessageID: AE4ED1DD325
Report: ClamAV: link.postcard.christmas.index.php4225.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wupi@xxx
Subject: Fw: Merry Christmas!
MessageID: 29D2F1DD325
Report: ClamAV: link.postcard.php8123.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php8123.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: izaj@xxx
Subject: Merry Christmas!
MessageID: 1BF001DD325
Report: ClamAV: link.postcard.htm0333.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.htm0333.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ofid@xxx
Subject: Merry Christmas!
MessageID: CB6961DD325
Report: ClamAV: link.postcard.christmas.htm3543.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: peko@xxx
Subject: Merry Christmas!
MessageID: 3760A1DD325
Report: ClamAV: link.postcard.php0770.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bono@xxx
Subject: Merry Christmas!
MessageID: 896541DD325
Report: ClamAV: postcard.index.jpg7771.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fopa@xxx
Subject: Re: Merry Christmas!
MessageID: 4F53E1DD325
Report: ClamAV: postcard.christmas.htm8410.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kuganoc@xxx
Subject: Merry Christmas!
MessageID: 641591DD325
Report: ClamAV: postcard.index.jpg8846.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gucu@xxx
Subject: Fw: Merry Christmas!
MessageID: C103E1DD325
Report: ClamAV: postcard.christmas.htm8161.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm8161.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ivut@xxx
Subject: Merry Christmas!
MessageID: 7AE331DD325
Report: ClamAV: postcard.index.htm8282.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujouk@xxx
Subject: Fw: Merry Christmas!
MessageID: A98C31DD325
Report: ClamAV: postcard.christmas.index.gif2572.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uuzid@xxx
Subject: Merry Christmas!
MessageID: B58401DD325
Report: ClamAV: link.postcard.php8303.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aufi@xxx
Subject: Fw: Merry Christmas!
MessageID: 51B671DD325
Report: ClamAV: postcard.index.gif3304.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.gif3304.pif)
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 7898F1DD325
Report: ClamAV: foto1.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (foto1.cpl)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: maki@xxx
Subject: Merry Christmas!
MessageID: 5B92B1DD325
Report: ClamAV: postcard.christmas.index.jpg6117.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: veso@xxx
Subject: Re: Merry Christmas!
MessageID: 1AA0C1DD325
Report: ClamAV: link.postcard.php6752.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cozo@xxx
Subject: Merry Christmas!
MessageID: C17E61DD325
Report: ClamAV: link.postcard.htm8200.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wujas@xxx
Subject: Fw: Merry Christmas!
MessageID: 1517F1DD325
Report: ClamAV: link.postcard.index.htm5354.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm5354.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tapa@xxx
Subject: Re: Merry Christmas!
MessageID: 6ED9E1DD325
Report: ClamAV: postcard.index.htm2681.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: woce@xxx
Subject: Fw: Merry Christmas!
MessageID: 724461DD325
Report: ClamAV: postcard.index.htm1020.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm1020.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vuviwe@xxx
Subject: Fw: Merry Christmas!
MessageID: E066E1DD325
Report: ClamAV: postcard.christmas.gif3888.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: oukojeu@xxx
Subject: Fw: Merry Christmas!
MessageID: 2969B1DD325
Report: ClamAV: link.postcard.christmas.htm8542.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: huzaza@xxx
Subject: Fw: Merry Christmas!
MessageID: 368E31DD325
Report: ClamAV: postcard.gif5570.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.gif5570.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tope@xxx
Subject: Fw: Merry Christmas!
MessageID: 3D3911DD325
Report: ClamAV: link.postcard.christmas.index.htm2728.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm2728.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ejad@xxx
Subject: Fw: Merry Christmas!
MessageID: ADA9C1DD326
Report: ClamAV: link.postcard.php0041.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vepepij@xxx
Subject: Merry Christmas!
MessageID: B29961DD325
Report: ClamAV: postcard.index.gif3315.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.gif3315.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uhil@xxx
Subject: Re: Merry Christmas!
MessageID: A70F31DD325
Report: ClamAV: link.postcard.htm8146.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.htm8146.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fikede@xxx
Subject: Re: Merry Christmas!
MessageID: ABF8E1DD325
Report: ClamAV: link.postcard.christmas.htm2072.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm2072.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: izowuun@xxx
Subject: Merry Christmas!
MessageID: 7B4AA1DD325
Report: ClamAV: postcard.christmas.gif0320.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.gif0320.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: satahau@xxx
Subject: Merry Christmas!
MessageID: A64181DD325
Report: ClamAV: postcard.christmas.php4152.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seuz@xxx
Subject: Fw: Merry Christmas!
MessageID: A0BB31DD325
Report: ClamAV: postcard.index.jpg4772.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ronuwuu@xxx
Subject: Fw: Merry Christmas!
MessageID: 391C21DD325
Report: ClamAV: postcard.christmas.gif8581.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif8581.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: banibaz@xxx
Subject: Merry Christmas!
MessageID: 460EA1DD325
Report: ClamAV: link.postcard.christmas.index.htm0438.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jine@xxx
Subject: Fw: Merry Christmas!
MessageID: 525381DD325
Report: ClamAV: link.postcard.index.htm3612.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm3612.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukap@xxx
Subject: Re: Merry Christmas!
MessageID: 75C641DD325
Report: ClamAV: link.postcard.christmas.index.jpg3228.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg3228.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hobem@xxx
Subject: Merry Christmas!
MessageID: 95C2B1DD325
Report: ClamAV: link.postcard.christmas.index.php3704.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: minatat@xxx
Subject: Fw: Merry Christmas!
MessageID: 2B7A11DD325
Report: ClamAV: postcard.christmas.index.htm3513.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm3513.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nide@xxx
Subject: Merry Christmas!
MessageID: 4CA101DD325
Report: ClamAV: link.postcard.christmas.index.php0411.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php0411.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lemane@xxx
Subject: Merry Christmas!
MessageID: 46B491DD325
Report: ClamAV: link.postcard.index.htm8231.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm8231.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: olehuh@xxx
Subject: Merry Christmas!
MessageID: AF3C71DD325
Report: ClamAV: link.postcard.index.jpg3400.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tulijum@xxx
Subject: Fw: Merry Christmas!
MessageID: 0C1801DD325
Report: ClamAV: link.postcard.christmas.htm2328.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ikazab@xxx
Subject: Re: Merry Christmas!
MessageID: 990DA1DD325
Report: ClamAV: postcard.htm6612.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm6612.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: figej@xxx
Subject: Re: Merry Christmas!
MessageID: B6C211DD325
Report: ClamAV: link.postcard.index.php4660.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sefi@xxx
Subject: Merry Christmas!
MessageID: AC4BB1DD325
Report: ClamAV: postcard.gif5040.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eruwod@xxx
Subject: Re: Merry Christmas!
MessageID: 691AC1DD325
Report: ClamAV: link.postcard.index.gif8848.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vaki@xxx
Subject: Merry Christmas!
MessageID: 099631DD325
Report: ClamAV: link.postcard.index.htm1823.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: heho@xxx
Subject: Merry Christmas!
MessageID: AADC61DD325
Report: ClamAV: postcard.christmas.index.htm3037.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm3037.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: humo@xxx
Subject: Fw: Merry Christmas!
MessageID: CCAC81DD325
Report: ClamAV: link.postcard.christmas.htm4551.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm4551.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vasujuh@xxx
Subject: Re: Merry Christmas!
MessageID: 1AE6E1DD325
Report: ClamAV: link.postcard.christmas.jpg5674.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jakiju@xxx
Subject: Fw: Merry Christmas!
MessageID: 1BE061DD325
Report: ClamAV: link.postcard.christmas.gif1266.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gemi@xxx
Subject: Merry Christmas!
MessageID: 1F4A01DD325
Report: ClamAV: postcard.christmas.index.gif2531.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif2531.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: amowa@xxx
Subject: Merry Christmas!
MessageID: 5426F1DD325
Report: ClamAV: link.postcard.christmas.jpg3311.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.jpg3311.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jirani@xxx
Subject: Merry Christmas!
MessageID: DD10A1DD325
Report: ClamAV: postcard.htm6818.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ewer@xxx
Subject: Merry Christmas!
MessageID: 3BE5E1DD325
Report: ClamAV: link.postcard.christmas.htm6663.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tupu@xxx
Subject: Re: Merry Christmas!
MessageID: 860651DD325
Report: ClamAV: postcard.gif8151.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.gif8151.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vemu@xxx
Subject: Merry Christmas!
MessageID: 35F021DD325
Report: ClamAV: link.postcard.christmas.gif7687.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: buko@xxx
Subject: Fw: Merry Christmas!
MessageID: 1C1241DD325
Report: ClamAV: postcard.index.php8037.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: epej@xxx
Subject: Merry Christmas!
MessageID: 5E7B01DD325
Report: ClamAV: postcard.jpg2084.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg2084.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jaub@xxx
Subject: Merry Christmas!
MessageID: E940D1DD325
Report: ClamAV: link.postcard.christmas.index.gif6140.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pucu@xxx
Subject: Merry Christmas!
MessageID: 07C691DD325
Report: ClamAV: postcard.christmas.index.php4054.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: buhotop@xxx
Subject: Re: Merry Christmas!
MessageID: 5AB511DD325
Report: ClamAV: link.postcard.htm1620.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fovop@xxx
Subject: Merry Christmas!
MessageID: 7C45D1DD325
Report: ClamAV: postcard.php5421.zip contains Worm.Zafi.D
Posted by Samboy
at 12:01 AM WST