Jan 4
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: azigiw@xxx
Subject: Re: Merry Christmas!
MessageID: 4D0461DD325
Report: ClamAV: link.postcard.christmas.index.php0407.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gozezu@xxx
Subject: Merry Christmas!
MessageID: 0EDEB1DD325
Report: ClamAV: postcard.index.htm4175.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm4175.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mede@xxx
Subject: Fw: Merry Christmas!
MessageID: 5EF7A1DD325
Report: ClamAV: link.postcard.htm0310.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rasuur@xxx
Subject: Merry Christmas!
MessageID: D73931DD325
Report: ClamAV: postcard.christmas.jpg1180.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg1180.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemuk@xxx
Subject: Re: Merry Christmas!
MessageID: F14201DD325
Report: ClamAV: link.postcard.christmas.jpg2760.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wiriw@xxx
Subject: Merry Christmas!
MessageID: B1D9C1DD325
Report: ClamAV: postcard.christmas.htm1424.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm1424.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ocalau@xxx
Subject: Merry Christmas!
MessageID: 2FAAC1DD325
Report: ClamAV: link.postcard.christmas.index.gif0120.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif0120.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: edunou@xxx
Subject: Merry Christmas!
MessageID: 32EAD1DD325
Report: ClamAV: postcard.index.gif3703.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uveh@xxx
Subject: Merry Christmas!
MessageID: 0B2411DD325
Report: ClamAV: postcard.index.gif6422.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jirom@xxx
Subject: Merry Christmas!
MessageID: 52FC41DD325
Report: ClamAV: postcard.christmas.index.jpg1081.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pawi@xxx
Subject: Fw: Merry Christmas!
MessageID: 063821DD325
Report: ClamAV: link.postcard.index.jpg7833.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zogaro@xxx
Subject: Fw: Merry Christmas!
MessageID: 5B01F1DD325
Report: ClamAV: postcard.htm1643.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm1643.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aris@xxx
Subject: Re: Merry Christmas!
MessageID: 7522F1DD325
Report: ClamAV: link.postcard.christmas.jpg2275.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.jpg2275.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gizofuk@xxx
Subject: Merry Christmas!
MessageID: EFC1E1DD325
Report: ClamAV: postcard.christmas.index.php2065.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hobagi@xxx
Subject: Merry Christmas!
MessageID: CFEB11DD325
Report: ClamAV: postcard.index.gif6837.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.gif6837.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wetit@xxx
Subject: Re: Merry Christmas!
MessageID: 1F7FB1DD325
Report: ClamAV: link.postcard.christmas.index.php6870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jaugaka@xxx
Subject: Re: Merry Christmas!
MessageID: 5E9FC1DD325
Report: ClamAV: postcard.index.jpg5252.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jogo@xxx
Subject: Merry Christmas!
MessageID: B0EC41DD325
Report: ClamAV: postcard.christmas.jpg1156.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tuluw@xxx
Subject: Fw: Merry Christmas!
MessageID: 8E4F21DD325
Report: ClamAV: link.postcard.christmas.index.php3502.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php3502.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gujozat@xxx
Subject: Merry Christmas!
MessageID: 24A271DD325
Report: ClamAV: link.postcard.christmas.index.php5174.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php5174.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jarib@xxx
Subject: Re: Merry Christmas!
MessageID: 81B8E1DD325
Report: ClamAV: link.postcard.christmas.php8144.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jera@xxx
Subject: Re: Merry Christmas!
MessageID: EBDA11DD325
Report: ClamAV: postcard.christmas.htm0861.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm0861.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cevi@xxx
Subject: Merry Christmas!
MessageID: 021A81DD325
Report: ClamAV: postcard.index.jpg0233.zip contains Worm.Zafi.D


Sender:
IP Address: 167.181.33.37
Recipient: error_mail@xxx
Subject: Delivery Status Notification (Failure)
MessageID: 694521DD325
Report: ClamAV: re_mail.scr contains Worm.Sober.I
MailScanner: Windows Screensavers are often used to hide viruses (re_mail.scr)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gabo@xxx
Subject: Merry Christmas!
MessageID: 4E52E1DD325
Report: ClamAV: link.postcard.christmas.htm6486.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm6486.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nafe@xxx
Subject: Merry Christmas!
MessageID: A34EA1DD325
Report: ClamAV: link.postcard.index.php0810.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php0810.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: reno@xxx
Subject: Merry Christmas!
MessageID: 2235B1DD325
Report: ClamAV: link.postcard.christmas.gif4453.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zina@xxx
Subject: Fw: Merry Christmas!
MessageID: 57FEE1DD325
Report: ClamAV: postcard.index.htm3071.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gipudu@xxx
Subject: Re: Merry Christmas!
MessageID: 65BBA1DD325
Report: ClamAV: postcard.christmas.gif7244.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif7244.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coji@xxx
Subject: Merry Christmas!
MessageID: 87B311DD325
Report: ClamAV: link.postcard.christmas.index.gif3410.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eruu@xxx
Subject: Fw: Merry Christmas!
MessageID: 153CE1DD325
Report: ClamAV: link.postcard.gif4768.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: surujeb@xxx
Subject: Re: Merry Christmas!
MessageID: 538C61DD325
Report: ClamAV: link.postcard.index.gif8650.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.gif8650.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hota@xxx
Subject: Merry Christmas!
MessageID: DF6121DD325
Report: ClamAV: postcard.index.jpg8651.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utuvuwo@xxx
Subject: Merry Christmas!
MessageID: 3E8C71DD325
Report: ClamAV: postcard.christmas.index.gif0020.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: murit@xxx
Subject: Merry Christmas!
MessageID: EF2EC1DD325
Report: ClamAV: link.postcard.christmas.index.htm1860.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vuje@xxx
Subject: Re: Merry Christmas!
MessageID: 054341DD325
Report: ClamAV: postcard.index.php6373.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php6373.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dofajuj@xxx
Subject: Merry Christmas!
MessageID: 1C6701DD325
Report: ClamAV: link.postcard.christmas.index.gif3851.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: niveji@xxx
Subject: Fw: Merry Christmas!
MessageID: 2D5A21DD325
Report: ClamAV: link.postcard.christmas.gif4500.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lobog@xxx
Subject: Re: Merry Christmas!
MessageID: 1780F1DD325
Report: ClamAV: link.postcard.christmas.php0285.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: buwaho@xxx
Subject: Merry Christmas!
MessageID: EC4871DD325
Report: ClamAV: postcard.gif1288.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Document
MessageID: 678571DD325
Report: ClamAV: Alive_condom.exe contains Worm.Bagle.Z
MailScanner: Executable DOS/Windows programs are dangerous in email (Alive_condom.exe)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wifi@xxx
Subject: Merry Christmas!
MessageID: 19CF81DD325
Report: ClamAV: link.postcard.christmas.htm6401.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nefudec@xxx
Subject: Merry Christmas!
MessageID: 4D5D91DD325
Report: ClamAV: link.postcard.christmas.index.gif6276.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif6276.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: peju@xxx
Subject: Fw: Merry Christmas!
MessageID: 25C871DD325
Report: ClamAV: link.postcard.index.gif0065.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ceuge@xxx
Subject: Merry Christmas!
MessageID: 82E7B1DD325
Report: ClamAV: link.postcard.christmas.index.htm0724.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm0724.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jauv@xxx
Subject: Fw: Merry Christmas!
MessageID: 125D81DD325
Report: ClamAV: postcard.christmas.index.php4073.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eucenu@xxx
Subject: Merry Christmas!
MessageID: 484271DD325
Report: ClamAV: link.postcard.christmas.index.gif3376.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif3376.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: licuf@xxx
Subject: Merry Christmas!
MessageID: 53BB91DD325
Report: ClamAV: link.postcard.jpg7436.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.jpg7436.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ezuc@xxx
Subject: Re: Merry Christmas!
MessageID: E789C1DD325
Report: ClamAV: link.postcard.htm3126.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pehaliv@xxx
Subject: Fw: Merry Christmas!
MessageID: 0D3E01DD325
Report: ClamAV: link.postcard.index.htm7354.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.htm7354.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: upir@xxx
Subject: Merry Christmas!
MessageID: 477711DD325
Report: ClamAV: link.postcard.christmas.gif2606.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif2606.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tohe@xxx
Subject: Merry Christmas!
MessageID: F413D1DD325
Report: ClamAV: link.postcard.php2355.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php2355.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuhubef@xxx
Subject: Re: Merry Christmas!
MessageID: 7889E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg3302.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wijan@xxx
Subject: Merry Christmas!
MessageID: D3AD91DD325
Report: ClamAV: link.postcard.christmas.index.gif0006.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duvenor@xxx
Subject: Merry Christmas!
MessageID: 359641DD325
Report: ClamAV: link.postcard.index.jpg3281.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg3281.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: geviv@xxx
Subject: Merry Christmas!
MessageID: 4285F1DD325
Report: ClamAV: postcard.index.gif7355.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uusa@xxx
Subject: Re: Merry Christmas!
MessageID: 749871DD325
Report: ClamAV: link.postcard.jpg3443.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dice@xxx
Subject: Merry Christmas!
MessageID: 2AA941DD325
Report: ClamAV: link.postcard.htm1874.zip contains Worm.Zafi.D

2 new Books
Topic: i-Solv Project
Yey! I bought two (2) new books on December 30, 2004.

One is a low-price edition (hence, no CD) of Dietel & Dietel's "VISUAL BASIC 6: How to program" (Php 525.00) and the other is Sybex's "Mastering Database Programming with Visual Basic 6" (Php 1,195.00).

I'm relieved to discover that I can easily learn these because of my background in BASICA and Clipper/Foxbase.

I've skimmed most of the SAMS book's first 3 chapters. I'm very excited to arrive on Chapter 17 for the two (2) complete applications! :-)

Jan 3
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bozure@xxx
Subject: Re: Merry Christmas!
MessageID: 699981DD325
Report: ClamAV: link.postcard.christmas.index.gif7334.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasa@xxx
Subject: Merry Christmas!
MessageID: 1C22F1DD325
Report: ClamAV: link.postcard.christmas.index.jpg5823.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bicu@xxx
Subject: Re: Merry Christmas!
MessageID: C8ED91DD325
Report: ClamAV: link.postcard.christmas.htm6700.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: damubo@xxx
Subject: Re: Merry Christmas!
MessageID: DFA7C1DD325
Report: ClamAV: link.postcard.christmas.gif8411.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: acutapu@xxx
Subject: Merry Christmas!
MessageID: C784F1DD325
Report: ClamAV: postcard.christmas.php1824.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php1824.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuwa@xxx
Subject: Merry Christmas!
MessageID: 061751DD325
Report: ClamAV: link.postcard.index.php7788.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.php7788.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wigu@xxx
Subject: Re: Merry Christmas!
MessageID: EF0591DD325
Report: ClamAV: postcard.christmas.gif0723.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.gif0723.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juve@xxx
Subject: Merry Christmas!
MessageID: 672BD1DD325
Report: ClamAV: link.postcard.index.gif2510.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: podaz@xxx
Subject: Merry Christmas!
MessageID: C1ED01DD325
Report: ClamAV: postcard.index.htm6257.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm6257.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juwohu@xxx
Subject: Merry Christmas!
MessageID: 349321DD325
Report: ClamAV: link.postcard.christmas.php4065.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php4065.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulum@xxx
Subject: Fw: Merry Christmas!
MessageID: 789EE1DD325
Report: ClamAV: postcard.christmas.htm7734.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm7734.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mucita@xxx
Subject: Re: Merry Christmas!
MessageID: DD64B1DD325
Report: ClamAV: postcard.index.jpg7152.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zere@xxx
Subject: Re: Merry Christmas!
MessageID: 233191DD325
Report: ClamAV: postcard.christmas.index.gif6807.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sude@xxx
Subject: Fw: Merry Christmas!
MessageID: 342361DD325
Report: ClamAV: link.postcard.christmas.php4264.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dihouse@xxx
Subject: Re: Merry Christmas!
MessageID: A0C851DD325
Report: ClamAV: link.postcard.htm4134.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.htm4134.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulur@xxx
Subject: Fw: Merry Christmas!
MessageID: 58C981DD325
Report: ClamAV: link.postcard.christmas.jpg2775.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: petog@xxx
Subject: Re: Merry Christmas!
MessageID: DB7231DD325
Report: ClamAV: postcard.christmas.index.jpg3578.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uruhauz@xxx
Subject: Merry Christmas!
MessageID: DE88A1DD325
Report: ClamAV: link.postcard.php7144.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php7144.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kawu@xxx
Subject: Re: Merry Christmas!
MessageID: B4D641DD325
Report: ClamAV: link.postcard.index.jpg7864.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: repa@xxx
Subject: Merry Christmas!
MessageID: 815AB1DD325
Report: ClamAV: postcard.christmas.jpg8281.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: samiki@xxx
Subject: Re: Merry Christmas!
MessageID: 83AFB1DD325
Report: ClamAV: link.postcard.php8304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucojali@xxx
Subject: Re: Merry Christmas!
MessageID: 603E21DD325
Report: ClamAV: link.postcard.index.htm0756.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm0756.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukefuv@xxx
Subject: Merry Christmas!
MessageID: A12B61DD325
Report: ClamAV: link.postcard.index.gif1004.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wate@xxx
Subject: Merry Christmas!
MessageID: 2A0B41DD325
Report: ClamAV: link.postcard.index.php6013.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php6013.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vonasib@xxx
Subject: Fw: Merry Christmas!
MessageID: DE77F1DD325
Report: ClamAV: postcard.gif3527.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.gif3527.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dakap@xxx
Subject: Merry Christmas!
MessageID: E7ACA1DD325
Report: ClamAV: link.postcard.htm8258.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kuki@xxx
Subject: Merry Christmas!
MessageID: BAB6A1DD325
Report: ClamAV: link.postcard.christmas.htm7351.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duporit@xxx
Subject: Re: Merry Christmas!
MessageID: 15EB01DD325
Report: ClamAV: link.postcard.index.php6512.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.php6512.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seto@xxx
Subject: Re: Merry Christmas!
MessageID: 685EE1DD325
Report: ClamAV: postcard.christmas.index.jpg1433.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.jpg1433.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: desaju@xxx
Subject: Merry Christmas!
MessageID: 412341DD325
Report: ClamAV: link.postcard.christmas.index.php0760.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugib@xxx
Subject: Fw: Merry Christmas!
MessageID: 7114E1DD325
Report: ClamAV: link.postcard.htm7578.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: meru@xxx
Subject: Fw: Merry Christmas!
MessageID: 1D4381DD325
Report: ClamAV: postcard.christmas.htm6048.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wojiu@xxx
Subject: Merry Christmas!
MessageID: 3BD0A1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuno@xxx
Subject: Merry Christmas!
MessageID: 4B9771DD325
Report: ClamAV: link.postcard.christmas.htm8547.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: giluuh@xxx
Subject: Re: Merry Christmas!
MessageID: 21A3D1DD325
Report: ClamAV: link.postcard.christmas.htm4221.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iubumab@xxx
Subject: Merry Christmas!
MessageID: 4B2C91DD325
Report: ClamAV: link.postcard.index.htm4871.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kecu@xxx
Subject: Merry Christmas!
MessageID: 9A8431DD325
Report: ClamAV: postcard.php0814.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vemofad@xxx
Subject: Merry Christmas!
MessageID: 3237A1DD325
Report: ClamAV: link.postcard.gif2777.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.gif2777.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hofe@xxx
Subject: Merry Christmas!
MessageID: 556951DD325
Report: ClamAV: postcard.christmas.php7240.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suzo@xxx
Subject: Merry Christmas!
MessageID: E94891DD325
Report: ClamAV: link.postcard.index.jpg5745.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg5745.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pelu@xxx
Subject: Re: Merry Christmas!
MessageID: 9F3DD1DD325
Report: ClamAV: link.postcard.index.php6766.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Hello
MessageID: A35531DD325
Report: ClamAV: Details.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (Details.scr)

Dec 30
Topic: Viruses
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Changes..
MessageID: 3D5831DD325
Report: ClamAV: MoreInfo.exe contains Worm.Bagle.Z
MailScanner: Executable DOS/Windows programs are dangerous in email (MoreInfo.exe)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: RE: Text message
MessageID: B78641DD325
Report: ClamAV: text_document.zip contains Worm.Bagle.Gen-zippwd

Dec 29
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kocok@xxx
Subject: Merry Christmas!
MessageID: 6253D1DD325
Report: ClamAV: link.postcard.php3508.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukir@xxx
Subject: Merry Christmas!
MessageID: 9D0501DD326
Report: ClamAV: link.postcard.htm0143.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: voma@xxx
Subject: Fw: Merry Christmas!
MessageID: 3AB0F1DD325
Report: ClamAV: postcard.christmas.jpg2187.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2187.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: safi@xxx
Subject: Merry Christmas!
MessageID: 1AA7E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7318.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.jpg7318.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rake@xxx
Subject: Merry Christmas!
MessageID: 614421DD325
Report: ClamAV: postcard.jpg0304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mikuma@xxx
Subject: Merry Christmas!
MessageID: D26051DD325
Report: ClamAV: postcard.christmas.jpg4511.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wenon@xxx
Subject: Merry Christmas!
MessageID: 8ADCA1DD326
Report: ClamAV: postcard.index.htm5141.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.htm5141.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fimepub@xxx
Subject: Merry Christmas!
MessageID: 299531DD325
Report: ClamAV: link.postcard.index.php3785.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: olukid@xxx
Subject: Merry Christmas!
MessageID: 95E571DD325
Report: ClamAV: link.postcard.index.php7865.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: emupiv@xxx
Subject: Fw: Merry Christmas!
MessageID: 8353E1DD325
Report: ClamAV: link.postcard.jpg2274.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wirasa@xxx
Subject: Fw: Merry Christmas!
MessageID: 222B01DD325
Report: ClamAV: postcard.christmas.index.gif6236.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasu@xxx
Subject: Fw: Merry Christmas!
MessageID: B547F1DD325
Report: ClamAV: link.postcard.php2664.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suvek@xxx
Subject: Merry Christmas!
MessageID: 3CCD01DD325
Report: ClamAV: postcard.index.gif3431.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vesi@xxx
Subject: Fw: Merry Christmas!
MessageID: 631281DD325
Report: ClamAV: postcard.christmas.index.htm4582.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm4582.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: irec@xxx
Subject: Re: Merry Christmas!
MessageID: 885431DD325
Report: ClamAV: postcard.christmas.gif0837.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif0837.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: datamic@xxx
Subject: Re: Merry Christmas!
MessageID: E434C1DD325
Report: ClamAV: postcard.christmas.index.htm0768.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uvev@xxx
Subject: Re: Merry Christmas!
MessageID: A975B1DD325
Report: ClamAV: postcard.christmas.gif1134.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duzir@xxx
Subject: Fw: Merry Christmas!
MessageID: 19FDB1DD325
Report: ClamAV: link.postcard.index.jpg1747.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zopo@xxx
Subject: Re: Merry Christmas!
MessageID: 035361DD325
Report: ClamAV: link.postcard.christmas.index.htm3674.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ikiw@xxx
Subject: Merry Christmas!
MessageID: 221D51DD325
Report: ClamAV: postcard.christmas.index.php3876.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cofaj@xxx
Subject: Merry Christmas!
MessageID: D2B1F1DD325
Report: ClamAV: postcard.christmas.jpg0317.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg0317.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rotu@xxx
Subject: Re: Merry Christmas!
MessageID: 671FF1DD325
Report: ClamAV: link.postcard.index.php6704.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ipacafa@xxx
Subject: Merry Christmas!
MessageID: 99F271DD325
Report: ClamAV: link.postcard.index.htm4406.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uloh@xxx
Subject: Merry Christmas!
MessageID: D31F91DD325
Report: ClamAV: link.postcard.christmas.php2621.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: todu@xxx
Subject: Fw: Merry Christmas!
MessageID: B9B1B1DD325
Report: ClamAV: link.postcard.christmas.index.jpg4734.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg4734.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jize@xxx
Subject: Re: Merry Christmas!
MessageID: 5BEA01DD325
Report: ClamAV: link.postcard.christmas.php7607.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php7607.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: atiu@xxx
Subject: Merry Christmas!
MessageID: F0FA91DD325
Report: ClamAV: postcard.htm0871.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aligide@xxx
Subject: Merry Christmas!
MessageID: F1DF31DD325
Report: ClamAV: postcard.christmas.htm4000.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm4000.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: titi@xxx
Subject: Merry Christmas!
MessageID: B212C1DD325
Report: ClamAV: link.postcard.christmas.index.jpg5631.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cadu@xxx
Subject: Fw: Merry Christmas!
MessageID: 929BB1DD325
Report: ClamAV: link.postcard.index.gif7105.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iheca@xxx
Subject: Merry Christmas!
MessageID: E11EF1DD325
Report: ClamAV: postcard.christmas.jpg4406.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg4406.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vate@xxx
Subject: Fw: Merry Christmas!
MessageID: 900A91DD325
Report: ClamAV: postcard.christmas.gif5304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cume@xxx
Subject: Fw: Merry Christmas!
MessageID: F13A71DD325
Report: ClamAV: postcard.php1417.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wilizis@xxx
Subject: Merry Christmas!
MessageID: 1FA001DD325
Report: ClamAV: link.postcard.christmas.index.php0436.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fazepi@xxx
Subject: Merry Christmas!
MessageID: 0B9D61DD325
Report: ClamAV: postcard.index.htm7866.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vedi@xxx
Subject: Re: Merry Christmas!
MessageID: 8B3611DD325
Report: ClamAV: postcard.jpg6277.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uuzuvuf@xxx
Subject: Fw: Merry Christmas!
MessageID: E0CF51DD325
Report: ClamAV: postcard.christmas.index.htm5628.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm5628.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cabas@xxx
Subject: Merry Christmas!
MessageID: 0FD6A1DD325
Report: ClamAV: postcard.christmas.index.jpg2280.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.jpg2280.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemevez@xxx
Subject: Merry Christmas!
MessageID: 611811DD325
Report: ClamAV: link.postcard.php0218.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rulu@xxx
Subject: Merry Christmas!
MessageID: 483251DD325
Report: ClamAV: link.postcard.index.jpg6852.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: imiw@xxx
Subject: Fw: Merry Christmas!
MessageID: 85C9D1DD325
Report: ClamAV: postcard.christmas.index.gif0653.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sufa@xxx
Subject: Re: Merry Christmas!
MessageID: 25FF91DD325
Report: ClamAV: link.postcard.index.htm5130.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.htm5130.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iude@xxx
Subject: Re: Merry Christmas!
MessageID: 28EA31DD325
Report: ClamAV: link.postcard.index.jpg1323.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg1323.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fovo@xxx
Subject: Merry Christmas!
MessageID: 99F301DD325
Report: ClamAV: link.postcard.php5370.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php5370.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: biver@xxx
Subject: Merry Christmas!
MessageID: 0D81A1DD325
Report: ClamAV: postcard.christmas.jpg0880.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ediz@xxx
Subject: Re: Merry Christmas!
MessageID: 30AA31DD325
Report: ClamAV: postcard.christmas.index.gif4823.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.gif4823.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poma@xxx
Subject: Fw: Merry Christmas!
MessageID: 9BB2A1DD325
Report: ClamAV: link.postcard.christmas.htm3106.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm3106.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: beji@xxx
Subject: Merry Christmas!
MessageID: B7A061DD325
Report: ClamAV: postcard.jpg1742.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.jpg1742.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jidi@xxx
Subject: Re: Merry Christmas!
MessageID: E6CDB1DD325
Report: ClamAV: link.postcard.christmas.php2313.zip contains Worm.Zafi.D

Dec 28
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gudi@xxx
Subject: Merry Christmas!
MessageID: D38AE1DD325
Report: ClamAV: link.postcard.christmas.index.php6063.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php6063.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: onolep@xxx
Subject: Fw: Merry Christmas!
MessageID: ED4DD1DD325
Report: ClamAV: postcard.christmas.index.php2752.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.php2752.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kopi@xxx
Subject: Merry Christmas!
MessageID: 55B361DD325
Report: ClamAV: link.postcard.christmas.index.htm0237.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fodu@xxx
Subject: Merry Christmas!
MessageID: 446861DD325
Report: ClamAV: postcard.christmas.htm3227.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm3227.cmd)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: D394F1DD325
Report: ClamAV: Cat.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (Cat.com)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubifoni@xxx
Subject: Merry Christmas!
MessageID: 694E71DD325
Report: ClamAV: postcard.gif4635.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.gif4635.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: monekil@xxx
Subject: Fw: Merry Christmas!
MessageID: 4EDB51DD325
Report: ClamAV: link.postcard.index.gif2300.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.gif2300.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cade@xxx
Subject: Merry Christmas!
MessageID: C30C41DD325
Report: ClamAV: link.postcard.christmas.index.gif8828.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zegacal@xxx
Subject: Re: Merry Christmas!
MessageID: 5E8911DD325
Report: ClamAV: postcard.christmas.index.jpg6238.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fivo@xxx
Subject: Merry Christmas!
MessageID: 902611DD325
Report: ClamAV: postcard.index.gif5372.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mila@xxx
Subject: Re: Merry Christmas!
MessageID: 3CB391DD325
Report: ClamAV: link.postcard.index.htm5123.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm5123.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubedik@xxx
Subject: Merry Christmas!
MessageID: 4A92E1DD325
Report: ClamAV: link.postcard.christmas.index.php5084.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mogavi@xxx
Subject: Re: Merry Christmas!
MessageID: 2FD5B1DD325
Report: ClamAV: postcard.gif7406.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cefi@xxx
Subject: Merry Christmas!
MessageID: 255AF1DD325
Report: ClamAV: link.postcard.jpg5803.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.jpg5803.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasamu@xxx
Subject: Merry Christmas!
MessageID: 2165B1DD325
Report: ClamAV: link.postcard.index.htm0428.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ufevuwa@xxx
Subject: Merry Christmas!
MessageID: 300AB1DD325
Report: ClamAV: postcard.christmas.index.php3751.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: leso@xxx
Subject: Fw: Merry Christmas!
MessageID: 27A911DD325
Report: ClamAV: link.postcard.index.gif6801.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.gif6801.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sewi@xxx
Subject: Re: Merry Christmas!
MessageID: F0ED91DD325
Report: ClamAV: postcard.jpg1167.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: osid@xxx
Subject: Merry Christmas!
MessageID: 4225E1DD325
Report: ClamAV: link.postcard.christmas.index.php3020.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wafi@xxx
Subject: Merry Christmas!
MessageID: 820A71DD325
Report: ClamAV: link.postcard.christmas.index.php2635.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iram@xxx
Subject: Merry Christmas!
MessageID: C84B21DD325
Report: ClamAV: link.postcard.htm0706.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sizu@xxx
Subject: Merry Christmas!
MessageID: 970631DD325
Report: ClamAV: postcard.christmas.gif5811.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cici@xxx
Subject: Re: Merry Christmas!
MessageID: 1497B1DD325
Report: ClamAV: link.postcard.index.htm1028.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm1028.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pate@xxx
Subject: Merry Christmas!
MessageID: D9F2A1DD325
Report: ClamAV: postcard.php3147.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Thanks :)
MessageID: 0EF121DD325
Report: ClamAV: the_message.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (the_message.scr)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nifiwus@xxx
Subject: Fw: Merry Christmas!
MessageID: 8FA731DD325
Report: ClamAV: postcard.htm8541.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm8541.cmd)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 933931DD325
Report: ClamAV: Cat.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (Cat.com)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ibeza@xxx
Subject: Fw: Merry Christmas!
MessageID: 75E721DD325
Report: ClamAV: postcard.index.jpg6670.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg6670.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hoca@xxx
Subject: Re: Merry Christmas!
MessageID: A72FC1DD325
Report: ClamAV: postcard.christmas.index.gif2058.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif2058.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bisimir@xxx
Subject: Merry Christmas!
MessageID: 7767A1DD325
Report: ClamAV: postcard.christmas.jpg8672.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nuta@xxx
Subject: Merry Christmas!
MessageID: 43C161DD325
Report: ClamAV: postcard.index.php1862.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nise@xxx
Subject: Merry Christmas!
MessageID: C2EAB1DD325
Report: ClamAV: postcard.index.jpg1268.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.jpg1268.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lalo@xxx
Subject: Merry Christmas!
MessageID: 4F4CC1DD325
Report: ClamAV: postcard.christmas.jpg2233.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2233.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mefi@xxx
Subject: Fw: Merry Christmas!
MessageID: 7948F1DD325
Report: ClamAV: link.postcard.index.jpg3113.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: reku@xxx
Subject: Merry Christmas!
MessageID: 532DB1DD325
Report: ClamAV: link.postcard.php7027.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seda@xxx
Subject: Fw: Merry Christmas!
MessageID: E75461DD325
Report: ClamAV: postcard.htm6487.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm6487.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nirasid@xxx
Subject: Re: Merry Christmas!
MessageID: 45F5E1DD325
Report: ClamAV: postcard.index.jpg8312.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sotimow@xxx
Subject: Re: Merry Christmas!
MessageID: 007821DD325
Report: ClamAV: postcard.index.htm5582.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm5582.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vuzisi@xxx
Subject: Merry Christmas!
MessageID: 5F88F1DD325
Report: ClamAV: link.postcard.christmas.index.php7883.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php7883.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ropetut@xxx
Subject: Merry Christmas!
MessageID: 1B6841DD325
Report: ClamAV: link.postcard.christmas.index.php1358.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php1358.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: idajoso@xxx
Subject: Merry Christmas!
MessageID: AC7A91DD325
Report: ClamAV: postcard.index.jpg1326.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: taciz@xxx
Subject: Merry Christmas!
MessageID: 7CD321DD325
Report: ClamAV: link.postcard.index.jpg6113.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sepib@xxx
Subject: Merry Christmas!
MessageID: 466BF1DD325
Report: ClamAV: postcard.christmas.index.htm1515.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gimem@xxx
Subject: Merry Christmas!
MessageID: 35C9C1DD325
Report: ClamAV: postcard.jpg4747.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dizape@xxx
Subject: Re: Merry Christmas!
MessageID: 97ECD1DD325
Report: ClamAV: postcard.php3534.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: roka@xxx
Subject: Fw: Merry Christmas!
MessageID: 801B01DD325
Report: ClamAV: postcard.php1158.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.php1158.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: paje@xxx
Subject: Merry Christmas!
MessageID: 219F71DD325
Report: ClamAV: postcard.christmas.index.gif0541.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif0541.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: biritak@xxx
Subject: Re: Merry Christmas!
MessageID: 602F61DD325
Report: ClamAV: link.postcard.christmas.index.htm1502.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubiu@xxx
Subject: Re: Merry Christmas!
MessageID: 716071DD325
Report: ClamAV: link.postcard.index.jpg6305.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg6305.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jiki@xxx
Subject: Merry Christmas!
MessageID: 79B7B1DD325
Report: ClamAV: link.postcard.htm3863.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gezi@xxx
Subject: Fw: Merry Christmas!
MessageID: DC4C91DD325
Report: ClamAV: postcard.christmas.jpg2274.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2274.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kufa@xxx
Subject: Fw: Merry Christmas!
MessageID: 46F861DD325
Report: ClamAV: link.postcard.christmas.gif2330.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif2330.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kineme@xxx
Subject: Re: Merry Christmas!
MessageID: C55F81DD325
Report: ClamAV: link.postcard.htm4741.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zumewez@xxx
Subject: Merry Christmas!
MessageID: A594F1DD325
Report: ClamAV: link.postcard.index.php5742.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lawo@xxx
Subject: Re: Merry Christmas!
MessageID: 93FB81DD325
Report: ClamAV: postcard.php4112.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemes@xxx
Subject: Merry Christmas!
MessageID: 266231DD325
Report: ClamAV: postcard.index.php8584.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hogufe@xxx
Subject: Fw: Merry Christmas!
MessageID: 48D5F1DD325
Report: ClamAV: postcard.christmas.index.gif6464.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif6464.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulehuma@xxx
Subject: Merry Christmas!
MessageID: 9B1611DD325
Report: ClamAV: postcard.htm6160.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.htm6160.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rojo@xxx
Subject: Merry Christmas!
MessageID: 771A21DD325
Report: ClamAV: postcard.christmas.php4802.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php4802.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zesa@xxx
Subject: Merry Christmas!
MessageID: AD4BB1DD325
Report: ClamAV: link.postcard.php7827.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php7827.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ciko@xxx
Subject: Merry Christmas!
MessageID: 090991DD325
Report: ClamAV: postcard.christmas.index.htm4431.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vozeuut@xxx
Subject: Merry Christmas!
MessageID: 755811DD325
Report: ClamAV: link.postcard.christmas.htm8761.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm8761.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zeku@xxx
Subject: Fw: Merry Christmas!
MessageID: E8E3B1DD325
Report: ClamAV: postcard.christmas.gif2016.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif2016.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mucun@xxx
Subject: Merry Christmas!
MessageID: 020601DD325
Report: ClamAV: link.postcard.gif7376.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cowi@xxx
Subject: Fw: Merry Christmas!
MessageID: E744E1DD325
Report: ClamAV: link.postcard.index.php5285.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php5285.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ovefa@xxx
Subject: Merry Christmas!
MessageID: A050F1DD325
Report: ClamAV: postcard.christmas.index.gif3257.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: abile@xxx
Subject: Fw: Merry Christmas!
MessageID: 3F69C1DD325
Report: ClamAV: link.postcard.christmas.index.php4746.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php4746.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kepi@xxx
Subject: Re: Merry Christmas!
MessageID: 1E4361DD325
Report: ClamAV: postcard.gif7684.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ufozija@xxx
Subject: Re: Merry Christmas!
MessageID: 0A4491DD325
Report: ClamAV: link.postcard.jpg2768.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mauva@xxx
Subject: Merry Christmas!
MessageID: 64B9D1DD325
Report: ClamAV: link.postcard.christmas.index.php1144.zip contains Worm.Zafi.D

Dec 27
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: C62291DD325
Report: ClamAV: foto2.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (foto2.cpl)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: New changes
MessageID: 3C9ED1DD325
Report: ClamAV: You_will_answer_to_me.hta contains Worm.Bagle.Gen-vbs
MailScanner: HTML archives are very dangerous in email (You_will_answer_to_me.hta)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: D20171DD325
Report: ClamAV: foto1.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (foto1.com)

Dec 23
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: obar@xxx
Subject: Re: Merry Christmas!
MessageID: 1DC191DD325
Report: ClamAV: link.postcard.christmas.index.jpg7732.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jelat@xxx
Subject: Fw: Merry Christmas!
MessageID: EE2041DD325
Report: ClamAV: postcard.christmas.jpg3465.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.jpg3465.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gopim@xxx
Subject: Merry Christmas!
MessageID: 7F9401DD325
Report: ClamAV: postcard.christmas.php7831.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php7831.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: obosa@xxx
Subject: Merry Christmas!
MessageID: B63BB1DD325
Report: ClamAV: link.postcard.christmas.index.jpg0017.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg0017.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: itidake@xxx
Subject: Merry Christmas!
MessageID: BCE571DD325
Report: ClamAV: link.postcard.christmas.php5683.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suvor@xxx
Subject: Fw: Merry Christmas!
MessageID: 71CE71DD325
Report: ClamAV: postcard.index.htm1555.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: egabobi@xxx
Subject: Re: Merry Christmas!
MessageID: 4224D1DD325
Report: ClamAV: postcard.christmas.php3367.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.php3367.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aviu@xxx
Subject: Merry Christmas!
MessageID: 5133D1DD325
Report: ClamAV: link.postcard.jpg3684.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.jpg3684.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: imove@xxx
Subject: Merry Christmas!
MessageID: 1135B1DD325
Report: ClamAV: postcard.christmas.index.gif6034.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.gif6034.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: socu@xxx
Subject: Fw: Merry Christmas!
MessageID: 187601DD325
Report: ClamAV: postcard.christmas.gif6333.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: azuc@xxx
Subject: Merry Christmas!
MessageID: 6269B1DD325
Report: ClamAV: postcard.christmas.htm1535.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm1535.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dozumem@xxx
Subject: Merry Christmas!
MessageID: 5800D1DD325
Report: ClamAV: link.postcard.christmas.jpg7640.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gapo@xxx
Subject: Fw: Merry Christmas!
MessageID: 581DA1DD325
Report: ClamAV: link.postcard.christmas.index.php7802.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 8BDB71DD325
Report: ClamAV: foto1.zip contains Worm.Bagle.Gen-zippwd


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uumi@xxx
Subject: Merry Christmas!
MessageID: 418761DD325
Report: ClamAV: link.postcard.gif5885.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: olar@xxx
Subject: Merry Christmas!
MessageID: F29241DD325
Report: ClamAV: link.postcard.jpg1584.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tato@xxx
Subject: Merry Christmas!
MessageID: 38B9D1DD325
Report: ClamAV: postcard.christmas.jpg4212.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ebemaud@xxx
Subject: Fw: Merry Christmas!
MessageID: EDAA91DD325
Report: ClamAV: postcard.christmas.php1872.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: teva@xxx
Subject: Merry Christmas!
MessageID: 3164D1DD326
Report: ClamAV: postcard.index.php6176.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: soki@xxx
Subject: Merry Christmas!
MessageID: E1F181DD325
Report: ClamAV: link.postcard.christmas.index.htm3263.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rugo@xxx
Subject: Fw: Merry Christmas!
MessageID: 8243D1DD325
Report: ClamAV: postcard.christmas.index.php6030.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zucu@xxx
Subject: Merry Christmas!
MessageID: 12F461DD325
Report: ClamAV: link.postcard.christmas.index.htm0840.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm0840.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fiho@xxx
Subject: Re: Merry Christmas!
MessageID: 729401DD325
Report: ClamAV: link.postcard.index.htm4403.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uriroso@xxx
Subject: Re: Merry Christmas!
MessageID: 1F4811DD325
Report: ClamAV: postcard.christmas.gif6376.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hime@xxx
Subject: Merry Christmas!
MessageID: 218DC1DD325
Report: ClamAV: postcard.christmas.index.htm8444.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pemuvu@xxx
Subject: Re: Merry Christmas!
MessageID: 5FE271DD325
Report: ClamAV: link.postcard.christmas.jpg7041.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: azac@xxx
Subject: Re: Merry Christmas!
MessageID: 3DDC91DD325
Report: ClamAV: postcard.christmas.index.jpg8044.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.jpg8044.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: berajam@xxx
Subject: Fw: Merry Christmas!
MessageID: 3CBDA1DD325
Report: ClamAV: postcard.christmas.index.php1261.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.php1261.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ipawa@xxx
Subject: Re: Merry Christmas!
MessageID: 164E11DD325
Report: ClamAV: link.postcard.christmas.jpg3253.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rudo@xxx
Subject: Fw: Merry Christmas!
MessageID: 3BE2C1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7672.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cawi@xxx
Subject: Fw: Merry Christmas!
MessageID: 7D17E1DD325
Report: ClamAV: postcard.christmas.jpg5307.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utamez@xxx
Subject: Fw: Merry Christmas!
MessageID: B7C301DD325
Report: ClamAV: postcard.christmas.gif8841.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif8841.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nulu@xxx
Subject: Merry Christmas!
MessageID: 19FE61DD325
Report: ClamAV: link.postcard.index.htm7555.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm7555.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: miwe@xxx
Subject: Merry Christmas!
MessageID: 1FBEB1DD325
Report: ClamAV: link.postcard.christmas.jpg6331.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.jpg6331.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ewuz@xxx
Subject: Fw: Merry Christmas!
MessageID: 689E11DD325
Report: ClamAV: link.postcard.christmas.php7616.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fita@xxx
Subject: Merry Christmas!
MessageID: EACA51DD325
Report: ClamAV: link.postcard.christmas.index.jpg5140.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: puja@xxx
Subject: Merry Christmas!
MessageID: EE7111DD325
Report: ClamAV: link.postcard.jpg8432.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pabe@xxx
Subject: Re: Merry Christmas!
MessageID: 11F321DD325
Report: ClamAV: link.postcard.christmas.index.php4276.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.php4276.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pile@xxx
Subject: Re: Merry Christmas!
MessageID: 811FB1DD325
Report: ClamAV: link.postcard.christmas.index.jpg6627.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: miwej@xxx
Subject: Merry Christmas!
MessageID: C58F21DD325
Report: ClamAV: postcard.gif5250.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ejehik@xxx
Subject: Fw: Merry Christmas!
MessageID: 7F8FA1DD325
Report: ClamAV: postcard.christmas.index.jpg3843.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vusica@xxx
Subject: Re: Merry Christmas!
MessageID: D55CC1DD325
Report: ClamAV: link.postcard.christmas.htm6206.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm6206.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vemi@xxx
Subject: Merry Christmas!
MessageID: BE1081DD325
Report: ClamAV: link.postcard.christmas.index.jpg7706.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.jpg7706.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: baho@xxx
Subject: Merry Christmas!
MessageID: 7C29B1DD325
Report: ClamAV: postcard.jpg4001.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg4001.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dopuz@xxx
Subject: Merry Christmas!
MessageID: F1BA91DD325
Report: ClamAV: postcard.christmas.index.htm6401.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gire@xxx
Subject: Fw: Merry Christmas!
MessageID: DEBF51DD325
Report: ClamAV: link.postcard.index.htm2825.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cimafo@xxx
Subject: Re: Merry Christmas!
MessageID: F1E791DD326
Report: ClamAV: link.postcard.christmas.gif1728.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif1728.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jera@xxx
Subject: Merry Christmas!
MessageID: 9F5E61DD325
Report: ClamAV: postcard.christmas.index.jpg2472.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ufekek@xxx
Subject: Merry Christmas!
MessageID: 6F89C1DD325
Report: ClamAV: postcard.christmas.jpg0031.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nica@xxx
Subject: Re: Merry Christmas!
MessageID: 708311DD325
Report: ClamAV: link.postcard.christmas.php4663.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mobu@xxx
Subject: Fw: Merry Christmas!
MessageID: 786341DD325
Report: ClamAV: postcard.index.jpg3422.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cosiuh@xxx
Subject: Re: Merry Christmas!
MessageID: 5B2751DD325
Report: ClamAV: postcard.christmas.jpg8041.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg8041.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eziu@xxx
Subject: Merry Christmas!
MessageID: 50E641DD325
Report: ClamAV: link.postcard.christmas.index.gif4631.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: viuco@xxx
Subject: Merry Christmas!
MessageID: AF7161DD325
Report: ClamAV: link.postcard.index.jpg5202.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ocez@xxx
Subject: Fw: Merry Christmas!
MessageID: AE4ED1DD325
Report: ClamAV: link.postcard.christmas.index.php4225.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wupi@xxx
Subject: Fw: Merry Christmas!
MessageID: 29D2F1DD325
Report: ClamAV: link.postcard.php8123.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php8123.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: izaj@xxx
Subject: Merry Christmas!
MessageID: 1BF001DD325
Report: ClamAV: link.postcard.htm0333.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.htm0333.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ofid@xxx
Subject: Merry Christmas!
MessageID: CB6961DD325
Report: ClamAV: link.postcard.christmas.htm3543.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: peko@xxx
Subject: Merry Christmas!
MessageID: 3760A1DD325
Report: ClamAV: link.postcard.php0770.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bono@xxx
Subject: Merry Christmas!
MessageID: 896541DD325
Report: ClamAV: postcard.index.jpg7771.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fopa@xxx
Subject: Re: Merry Christmas!
MessageID: 4F53E1DD325
Report: ClamAV: postcard.christmas.htm8410.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kuganoc@xxx
Subject: Merry Christmas!
MessageID: 641591DD325
Report: ClamAV: postcard.index.jpg8846.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gucu@xxx
Subject: Fw: Merry Christmas!
MessageID: C103E1DD325
Report: ClamAV: postcard.christmas.htm8161.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm8161.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ivut@xxx
Subject: Merry Christmas!
MessageID: 7AE331DD325
Report: ClamAV: postcard.index.htm8282.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujouk@xxx
Subject: Fw: Merry Christmas!
MessageID: A98C31DD325
Report: ClamAV: postcard.christmas.index.gif2572.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uuzid@xxx
Subject: Merry Christmas!
MessageID: B58401DD325
Report: ClamAV: link.postcard.php8303.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aufi@xxx
Subject: Fw: Merry Christmas!
MessageID: 51B671DD325
Report: ClamAV: postcard.index.gif3304.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.gif3304.pif)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 7898F1DD325
Report: ClamAV: foto1.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (foto1.cpl)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: maki@xxx
Subject: Merry Christmas!
MessageID: 5B92B1DD325
Report: ClamAV: postcard.christmas.index.jpg6117.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: veso@xxx
Subject: Re: Merry Christmas!
MessageID: 1AA0C1DD325
Report: ClamAV: link.postcard.php6752.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cozo@xxx
Subject: Merry Christmas!
MessageID: C17E61DD325
Report: ClamAV: link.postcard.htm8200.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wujas@xxx
Subject: Fw: Merry Christmas!
MessageID: 1517F1DD325
Report: ClamAV: link.postcard.index.htm5354.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm5354.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tapa@xxx
Subject: Re: Merry Christmas!
MessageID: 6ED9E1DD325
Report: ClamAV: postcard.index.htm2681.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: woce@xxx
Subject: Fw: Merry Christmas!
MessageID: 724461DD325
Report: ClamAV: postcard.index.htm1020.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm1020.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vuviwe@xxx
Subject: Fw: Merry Christmas!
MessageID: E066E1DD325
Report: ClamAV: postcard.christmas.gif3888.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: oukojeu@xxx
Subject: Fw: Merry Christmas!
MessageID: 2969B1DD325
Report: ClamAV: link.postcard.christmas.htm8542.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: huzaza@xxx
Subject: Fw: Merry Christmas!
MessageID: 368E31DD325
Report: ClamAV: postcard.gif5570.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.gif5570.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tope@xxx
Subject: Fw: Merry Christmas!
MessageID: 3D3911DD325
Report: ClamAV: link.postcard.christmas.index.htm2728.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm2728.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ejad@xxx
Subject: Fw: Merry Christmas!
MessageID: ADA9C1DD326
Report: ClamAV: link.postcard.php0041.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vepepij@xxx
Subject: Merry Christmas!
MessageID: B29961DD325
Report: ClamAV: postcard.index.gif3315.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.gif3315.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uhil@xxx
Subject: Re: Merry Christmas!
MessageID: A70F31DD325
Report: ClamAV: link.postcard.htm8146.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.htm8146.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fikede@xxx
Subject: Re: Merry Christmas!
MessageID: ABF8E1DD325
Report: ClamAV: link.postcard.christmas.htm2072.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm2072.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: izowuun@xxx
Subject: Merry Christmas!
MessageID: 7B4AA1DD325
Report: ClamAV: postcard.christmas.gif0320.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.gif0320.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: satahau@xxx
Subject: Merry Christmas!
MessageID: A64181DD325
Report: ClamAV: postcard.christmas.php4152.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seuz@xxx
Subject: Fw: Merry Christmas!
MessageID: A0BB31DD325
Report: ClamAV: postcard.index.jpg4772.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ronuwuu@xxx
Subject: Fw: Merry Christmas!
MessageID: 391C21DD325
Report: ClamAV: postcard.christmas.gif8581.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif8581.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: banibaz@xxx
Subject: Merry Christmas!
MessageID: 460EA1DD325
Report: ClamAV: link.postcard.christmas.index.htm0438.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jine@xxx
Subject: Fw: Merry Christmas!
MessageID: 525381DD325
Report: ClamAV: link.postcard.index.htm3612.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm3612.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukap@xxx
Subject: Re: Merry Christmas!
MessageID: 75C641DD325
Report: ClamAV: link.postcard.christmas.index.jpg3228.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg3228.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hobem@xxx
Subject: Merry Christmas!
MessageID: 95C2B1DD325
Report: ClamAV: link.postcard.christmas.index.php3704.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: minatat@xxx
Subject: Fw: Merry Christmas!
MessageID: 2B7A11DD325
Report: ClamAV: postcard.christmas.index.htm3513.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm3513.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nide@xxx
Subject: Merry Christmas!
MessageID: 4CA101DD325
Report: ClamAV: link.postcard.christmas.index.php0411.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php0411.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lemane@xxx
Subject: Merry Christmas!
MessageID: 46B491DD325
Report: ClamAV: link.postcard.index.htm8231.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm8231.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: olehuh@xxx
Subject: Merry Christmas!
MessageID: AF3C71DD325
Report: ClamAV: link.postcard.index.jpg3400.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tulijum@xxx
Subject: Fw: Merry Christmas!
MessageID: 0C1801DD325
Report: ClamAV: link.postcard.christmas.htm2328.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ikazab@xxx
Subject: Re: Merry Christmas!
MessageID: 990DA1DD325
Report: ClamAV: postcard.htm6612.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm6612.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: figej@xxx
Subject: Re: Merry Christmas!
MessageID: B6C211DD325
Report: ClamAV: link.postcard.index.php4660.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sefi@xxx
Subject: Merry Christmas!
MessageID: AC4BB1DD325
Report: ClamAV: postcard.gif5040.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eruwod@xxx
Subject: Re: Merry Christmas!
MessageID: 691AC1DD325
Report: ClamAV: link.postcard.index.gif8848.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vaki@xxx
Subject: Merry Christmas!
MessageID: 099631DD325
Report: ClamAV: link.postcard.index.htm1823.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: heho@xxx
Subject: Merry Christmas!
MessageID: AADC61DD325
Report: ClamAV: postcard.christmas.index.htm3037.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm3037.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: humo@xxx
Subject: Fw: Merry Christmas!
MessageID: CCAC81DD325
Report: ClamAV: link.postcard.christmas.htm4551.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm4551.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vasujuh@xxx
Subject: Re: Merry Christmas!
MessageID: 1AE6E1DD325
Report: ClamAV: link.postcard.christmas.jpg5674.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jakiju@xxx
Subject: Fw: Merry Christmas!
MessageID: 1BE061DD325
Report: ClamAV: link.postcard.christmas.gif1266.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gemi@xxx
Subject: Merry Christmas!
MessageID: 1F4A01DD325
Report: ClamAV: postcard.christmas.index.gif2531.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif2531.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: amowa@xxx
Subject: Merry Christmas!
MessageID: 5426F1DD325
Report: ClamAV: link.postcard.christmas.jpg3311.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.jpg3311.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jirani@xxx
Subject: Merry Christmas!
MessageID: DD10A1DD325
Report: ClamAV: postcard.htm6818.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ewer@xxx
Subject: Merry Christmas!
MessageID: 3BE5E1DD325
Report: ClamAV: link.postcard.christmas.htm6663.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tupu@xxx
Subject: Re: Merry Christmas!
MessageID: 860651DD325
Report: ClamAV: postcard.gif8151.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.gif8151.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vemu@xxx
Subject: Merry Christmas!
MessageID: 35F021DD325
Report: ClamAV: link.postcard.christmas.gif7687.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: buko@xxx
Subject: Fw: Merry Christmas!
MessageID: 1C1241DD325
Report: ClamAV: postcard.index.php8037.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: epej@xxx
Subject: Merry Christmas!
MessageID: 5E7B01DD325
Report: ClamAV: postcard.jpg2084.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg2084.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jaub@xxx
Subject: Merry Christmas!
MessageID: E940D1DD325
Report: ClamAV: link.postcard.christmas.index.gif6140.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pucu@xxx
Subject: Merry Christmas!
MessageID: 07C691DD325
Report: ClamAV: postcard.christmas.index.php4054.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: buhotop@xxx
Subject: Re: Merry Christmas!
MessageID: 5AB511DD325
Report: ClamAV: link.postcard.htm1620.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fovop@xxx
Subject: Merry Christmas!
MessageID: 7C45D1DD325
Report: ClamAV: postcard.php5421.zip contains Worm.Zafi.D

Dec 22
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jibo@xxx
Subject: Merry Christmas!
MessageID: B043E1DD325
Report: ClamAV: postcard.christmas.index.htm5412.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukam@xxx
Subject: Merry Christmas!
MessageID: 631441DD325
Report: ClamAV: postcard.index.jpg0477.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg0477.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: detoge@xxx
Subject: Merry Christmas!
MessageID: 77BD81DD325
Report: ClamAV: postcard.index.gif7044.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vugifod@xxx
Subject: Merry Christmas!
MessageID: 4FB4B1DD325
Report: ClamAV: postcard.christmas.index.jpg6605.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: otar@xxx
Subject: Merry Christmas!
MessageID: 006D61DD325
Report: ClamAV: postcard.christmas.index.jpg6686.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.jpg6686.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zuvev@xxx
Subject: Merry Christmas!
MessageID: D7FD61DD325
Report: ClamAV: postcard.index.jpg0110.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: parob@xxx
Subject: Re: Merry Christmas!
MessageID: DF4251DD325
Report: ClamAV: postcard.index.php6138.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lehu@xxx
Subject: Merry Christmas!
MessageID: A05381DD325
Report: ClamAV: link.postcard.index.gif7717.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.gif7717.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tovol@xxx
Subject: Re: Merry Christmas!
MessageID: A768E1DD325
Report: ClamAV: link.postcard.index.gif1184.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vide@xxx
Subject: Fw: Merry Christmas!
MessageID: 5ACD61DD325
Report: ClamAV: link.postcard.htm7333.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: etofauf@xxx
Subject: Merry Christmas!
MessageID: 816501DD325
Report: ClamAV: postcard.christmas.php1046.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jibetin@xxx
Subject: Merry Christmas!
MessageID: A6ED71DD325
Report: ClamAV: postcard.htm5057.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wate@xxx
Subject: Re: Merry Christmas!
MessageID: 9CA181DD326
Report: ClamAV: postcard.jpg8518.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg8518.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuune@xxx
Subject: Re: Merry Christmas!
MessageID: DAA901DD325
Report: ClamAV: link.postcard.christmas.index.gif5246.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: beduu@xxx
Subject: Merry Christmas!
MessageID: CC81F1DD325
Report: ClamAV: link.postcard.christmas.index.jpg1628.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tijo@xxx
Subject: Fw: Merry Christmas!
MessageID: A1EF01DD325
Report: ClamAV: postcard.gif6424.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 7B0CA1DD325
Report: ClamAV: Cat.scr contains Worm.Bagle.AG
MailScanner: Windows Screensavers are often used to hide viruses (Cat.scr)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zane@xxx
Subject: Fw: Merry Christmas!
MessageID: 0FB631DD325
Report: ClamAV: postcard.jpg4038.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg4038.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ehod@xxx
Subject: Fw: Merry Christmas!
MessageID: 5C2C41DD325
Report: ClamAV: postcard.php3476.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.php3476.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucuk@xxx
Subject: Re: Merry Christmas!
MessageID: 497821DD325
Report: ClamAV: postcard.christmas.gif6320.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.gif6320.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: saped@xxx
Subject: Merry Christmas!
MessageID: 6312E1DD325
Report: ClamAV: postcard.christmas.jpg1526.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zehe@xxx
Subject: Fw: Merry Christmas!
MessageID: 655241DD325
Report: ClamAV: postcard.christmas.jpg1613.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 8A1061DD325
Report: ClamAV: foto1.zip contains Worm.Bagle.Gen-zippwd


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mohe@xxx
Subject: Fw: Merry Christmas!
MessageID: E8C841DD325
Report: ClamAV: postcard.christmas.php8235.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php8235.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coluf@xxx
Subject: Re: Merry Christmas!
MessageID: CBC5B1DD325
Report: ClamAV: link.postcard.gif1524.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hufa@xxx
Subject: Merry Christmas!
MessageID: 1FE361DD325
Report: ClamAV: postcard.index.htm6774.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: luji@xxx
Subject: Merry Christmas!
MessageID: D10B81DD325
Report: ClamAV: link.postcard.christmas.jpg8231.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vociliw@xxx
Subject: Re: Merry Christmas!
MessageID: C33261DD325
Report: ClamAV: link.postcard.htm6502.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lafesiw@xxx
Subject: Re: Merry Christmas!
MessageID: 2A66B1DD325
Report: ClamAV: link.postcard.christmas.index.htm7348.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zamu@xxx
Subject: Merry Christmas!
MessageID: 95E651DD325
Report: ClamAV: postcard.christmas.index.jpg2113.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lepou@xxx
Subject: Merry Christmas!
MessageID: 4B3DC1DD325
Report: ClamAV: postcard.php1023.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pirer@xxx
Subject: Merry Christmas!
MessageID: 6D2841DD325
Report: ClamAV: link.postcard.gif4208.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poba@xxx
Subject: Fw: Merry Christmas!
MessageID: 7F1641DD325
Report: ClamAV: postcard.christmas.htm7263.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm7263.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: etegifo@xxx
Subject: Merry Christmas!
MessageID: 1EB3E1DD326
Report: ClamAV: link.postcard.gif1571.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dupofam@xxx
Subject: Fw: Merry Christmas!
MessageID: A6F701DD325
Report: ClamAV: link.postcard.index.jpg2827.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.jpg2827.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fali@xxx
Subject: Merry Christmas!
MessageID: 849B61DD325
Report: ClamAV: postcard.christmas.jpg1854.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: soto@xxx
Subject: Merry Christmas!
MessageID: 250F31DD325
Report: ClamAV: link.postcard.index.htm3047.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gakoba@xxx
Subject: Merry Christmas!
MessageID: C803E1DD325
Report: ClamAV: link.postcard.christmas.index.htm3072.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm3072.bat)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: AC0C61DD325
Report: ClamAV: foto3.exe contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (foto3.exe)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gazi@xxx
Subject: Merry Christmas!
MessageID: 752FE1DD325
Report: ClamAV: link.postcard.index.php5728.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rawejek@xxx
Subject: Merry Christmas!
MessageID: 9F75C1DD325
Report: ClamAV: postcard.christmas.index.php5870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vowe@xxx
Subject: Merry Christmas!
MessageID: 0E7371DD325
Report: ClamAV: postcard.index.htm6432.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rizela@xxx
Subject: Re: Merry Christmas!
MessageID: 245AC1DD325
Report: ClamAV: link.postcard.index.jpg6341.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: euni@xxx
Subject: Merry Christmas!
MessageID: 63C4F1DD325
Report: ClamAV: postcard.index.php0413.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugis@xxx
Subject: Merry Christmas!
MessageID: 70B8E1DD325
Report: ClamAV: link.postcard.index.php3055.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujab@xxx
Subject: Merry Christmas!
MessageID: A16DB1DD325
Report: ClamAV: postcard.htm2616.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.htm2616.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kifi@xxx
Subject: Merry Christmas!
MessageID: BEC7E1DD325
Report: ClamAV: link.postcard.jpg4743.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: muku@xxx
Subject: Fw: Merry Christmas!
MessageID: 1E6DF1DD325
Report: ClamAV: link.postcard.htm1626.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.htm1626.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utates@xxx
Subject: Merry Christmas!
MessageID: 284831DD325
Report: ClamAV: link.postcard.christmas.index.htm6422.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mimu@xxx
Subject: Merry Christmas!
MessageID: DB0A81DD325
Report: ClamAV: link.postcard.christmas.jpg7033.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lasu@xxx
Subject: Fw: Merry Christmas!
MessageID: 0C6621DD325
Report: ClamAV: postcard.christmas.index.jpg8007.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bowucam@xxx
Subject: Merry Christmas!
MessageID: 87B3E1DD325
Report: ClamAV: link.postcard.christmas.htm7802.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vowi@xxx
Subject: Merry Christmas!
MessageID: 610521DD325
Report: ClamAV: postcard.jpg1373.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.jpg1373.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lufen@xxx
Subject: Fw: Merry Christmas!
MessageID: 5121C1DD325
Report: ClamAV: postcard.christmas.index.gif6027.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sicepa@xxx
Subject: Merry Christmas!
MessageID: 23A5C1DD325
Report: ClamAV: postcard.index.jpg2852.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wepe@xxx
Subject: Merry Christmas!
MessageID: 0AAA21DD325
Report: ClamAV: postcard.christmas.index.htm6612.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gede@xxx
Subject: Re: Merry Christmas!
MessageID: 536B01DD325
Report: ClamAV: postcard.htm1835.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm1835.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jiso@xxx
Subject: Merry Christmas!
MessageID: 9264F1DD325
Report: ClamAV: link.postcard.gif5583.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.gif5583.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uticuc@xxx
Subject: Fw: Merry Christmas!
MessageID: 1167A1DD325
Report: ClamAV: postcard.christmas.index.jpg7822.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wone@xxx
Subject: Merry Christmas!
MessageID: AF7E01DD325
Report: ClamAV: postcard.christmas.gif5018.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lamo@xxx
Subject: Re: Merry Christmas!
MessageID: 2A84E1DD325
Report: ClamAV: postcard.christmas.index.gif7180.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.gif7180.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ewif@xxx
Subject: Merry Christmas!
MessageID: AE1091DD325
Report: ClamAV: postcard.jpg8840.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poha@xxx
Subject: Fw: Merry Christmas!
MessageID: 19E431DD325
Report: ClamAV: postcard.index.php4533.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php4533.bat)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: AAD501DD325
Report: ClamAV: foto3.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (foto3.cpl)

Dec. 21
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: C9A3A1DD325
Report: ClamAV: Secret.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Secret.cpl)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: d01a8c0@xxx
Subject: Merry Christmas!
MessageID: AE7651DD325
Report: ClamAV: postcard.index.htm0447.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pidijuk@xxx
Subject: Merry Christmas!
MessageID: 120991DD325
Report: ClamAV: link.postcard.index.gif5050.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.gif5050.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fefo@xxx
Subject: Merry Christmas!
MessageID: 859BA1DD325
Report: ClamAV: link.postcard.index.jpg8166.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 31FB01DD325
Report: ClamAV: Doll.zip contains Worm.Bagle.Gen-zippwd


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: canes@xxx
Subject: Re: Merry Christmas!
MessageID: 05CE91DD325
Report: ClamAV: link.postcard.christmas.gif7253.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fumu@xxx
Subject: Fw: Merry Christmas!
MessageID: 561571DD325
Report: ClamAV: postcard.christmas.htm2056.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gipohok@xxx
Subject: Re: Merry Christmas!
MessageID: C28C51DD325
Report: ClamAV: link.postcard.php2247.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php2247.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pobe@xxx
Subject: Re: Merry Christmas!
MessageID: 55FE01DD325
Report: ClamAV: link.postcard.gif8163.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: homib@xxx
Subject: Fw: Merry Christmas!
MessageID: 70C1A1DD325
Report: ClamAV: link.postcard.christmas.htm3646.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nofozas@xxx
Subject: Merry Christmas!
MessageID: 070E81DD325
Report: ClamAV: link.postcard.jpg6525.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pesew@xxx
Subject: Re: Merry Christmas!
MessageID: BEB571DD325
Report: ClamAV: link.postcard.christmas.index.php3487.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: alup@xxx
Subject: Fw: Merry Christmas!
MessageID: E2FCB1DD325
Report: ClamAV: postcard.christmas.index.htm7067.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm7067.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ouza@xxx
Subject: Merry Christmas!
MessageID: 64C7C1DD325
Report: ClamAV: postcard.christmas.gif3564.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif3564.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: usef@xxx
Subject: Merry Christmas!
MessageID: 933561DD325
Report: ClamAV: postcard.index.jpg3728.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tedo@xxx
Subject: Re: Merry Christmas!
MessageID: 4E03D1DD325
Report: ClamAV: postcard.htm8706.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucez@xxx
Subject: Merry Christmas!
MessageID: C02EC1DD325
Report: ClamAV: postcard.index.htm6114.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.htm6114.pif)



Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: igic@xxx
Subject: Fw: Merry Christmas!
MessageID: 1CBB91DD325
Report: ClamAV: link.postcard.php6123.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php6123.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ovew@xxx
Subject: Merry Christmas!
MessageID: 4C9131DD325
Report: ClamAV: link.postcard.index.htm7076.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: onok@xxx
Subject: Re: Merry Christmas!
MessageID: 712891DD325
Report: ClamAV: postcard.christmas.htm7742.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ofav@xxx
Subject: Re: Merry Christmas!
MessageID: 784701DD325
Report: ClamAV: link.postcard.jpg1456.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: urapuwu@xxx
Subject: Fw: Merry Christmas!
MessageID: 1B0831DD325
Report: ClamAV: postcard.index.php8857.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jufa@xxx
Subject: Re: Merry Christmas!
MessageID: 790A21DD325
Report: ClamAV: postcard.index.gif0534.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tiri@xxx
Subject: Merry Christmas!
MessageID: ED7561DD325
Report: ClamAV: link.postcard.christmas.index.gif8714.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vejiuw@xxx
Subject: Fw: Merry Christmas!
MessageID: B766B1DD325
Report: ClamAV: postcard.christmas.index.jpg0185.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lametu@xxx
Subject: Fw: Merry Christmas!
MessageID: D1E031DD325
Report: ClamAV: postcard.php8036.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fawe@xxx
Subject: Fw: Merry Christmas!
MessageID: EC6601DD325
Report: ClamAV: link.postcard.christmas.htm7487.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm7487.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: heri@xxx
Subject: Fw: Merry Christmas!
MessageID: 4CFD81DD325
Report: ClamAV: link.postcard.gif6648.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.gif6648.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: refe@xxx
Subject: Merry Christmas!
MessageID: A35FF1DD325
Report: ClamAV: postcard.christmas.index.htm3850.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rikor@xxx
Subject: Re: Merry Christmas!
MessageID: 77B1B1DD325
Report: ClamAV: link.postcard.jpg4556.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tojeke@xxx
Subject: Merry Christmas!
MessageID: 791441DD325
Report: ClamAV: postcard.index.jpg2651.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg2651.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wifejih@xxx
Subject: Merry Christmas!
MessageID: C038B1DD325
Report: ClamAV: link.postcard.php1487.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php1487.bat)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 6F3951DD325
Report: ClamAV: Dog.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Dog.cpl)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fewit@xxx
Subject: Fw: Merry Christmas!
MessageID: 759E01DD325
Report: ClamAV: postcard.index.php2568.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fojef@xxx
Subject: Fw: Merry Christmas!
MessageID: 513491DD325
Report: ClamAV: link.postcard.christmas.php6074.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ifuw@xxx
Subject: Re: Merry Christmas!
MessageID: 3DB481DD325
Report: ClamAV: postcard.christmas.index.jpg0147.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utaz@xxx
Subject: Fw: Merry Christmas!
MessageID: F0F731DD325
Report: ClamAV: postcard.index.jpg4452.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ginu@xxx
Subject: Re: Merry Christmas!
MessageID: E83D21DD325
Report: ClamAV: postcard.christmas.index.gif7212.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif7212.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sivoke@xxx
Subject: Merry Christmas!
MessageID: B0E291DD325
Report: ClamAV: postcard.christmas.htm2785.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm2785.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wahe@xxx
Subject: Fw: Merry Christmas!
MessageID: ECB681DD325
Report: ClamAV: postcard.index.htm2771.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ohok@xxx
Subject: Merry Christmas!
MessageID: B825F1DD325
Report: ClamAV: postcard.christmas.index.php6350.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ikek@xxx
Subject: Merry Christmas!
MessageID: D39311DD325
Report: ClamAV: postcard.gif4743.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubotac@xxx
Subject: Re: Merry Christmas!
MessageID: 7E2F21DD325
Report: ClamAV: link.postcard.christmas.php7614.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuvecus@xxx
Subject: Fw: Merry Christmas!
MessageID: 05AA91DD325
Report: ClamAV: postcard.christmas.jpg1743.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.jpg1743.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: akoh@xxx
Subject: Re: Merry Christmas!
MessageID: E104D1DD325
Report: ClamAV: link.postcard.christmas.index.php6882.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php6882.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucafib@xxx
Subject: Fw: Merry Christmas!
MessageID: 596AD1DD325
Report: ClamAV: link.postcard.christmas.index.gif5151.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dumaka@xxx
Subject: Merry Christmas!
MessageID: 3257B1DD325
Report: ClamAV: postcard.christmas.jpg2157.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2157.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hoji@xxx
Subject: Fw: Merry Christmas!
MessageID: BB7C51DD325
Report: ClamAV: link.postcard.christmas.index.jpg1054.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg1054.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gagi@xxx
Subject: Merry Christmas!
MessageID: A45511DD325
Report: ClamAV: link.postcard.christmas.php8500.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.php8500.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jara@xxx
Subject: Merry Christmas!
MessageID: 6CE441DD325
Report: ClamAV: postcard.christmas.index.gif5634.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zuwepik@xxx
Subject: Fw: Merry Christmas!
MessageID: 77B6C1DD325
Report: ClamAV: postcard.christmas.htm1767.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm1767.pif)