Jan 8
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Subject: Fax Message Received
MessageID: 0F5B91DD325
Report: ClamAV: Message.hta contains Worm.Bagle.Gen-vbs
MailScanner: HTML archives are very dangerous in email (Message.hta)

HAH! The Zafi-D infected computer has been blocked by postfix. No more mails from it!

Jan 6
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nivo@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: BC2D21DD325
Report: ClamAV: link.postcard.christmas.index.gif1550.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif1550.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucuw@sfelapco.com
Subject: Merry Christmas!
MessageID: CC46D1DD325
Report: ClamAV: postcard.index.htm7444.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm7444.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rihil@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 2DB5B1DD325
Report: ClamAV: postcard.index.jpg6677.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: woke@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 00B621DD325
Report: ClamAV: postcard.php2556.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.php2556.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suwitaf@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 50F451DD325
Report: ClamAV: link.postcard.christmas.index.gif4743.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucede@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 2877A1DD325
Report: ClamAV: postcard.php8582.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hogum@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 456B11DD325
Report: ClamAV: link.postcard.christmas.htm1875.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm1875.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kifu@sfelapco.com
Subject: Merry Christmas!
MessageID: 282E31DD325
Report: ClamAV: postcard.index.htm5857.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm5857.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mamac@sfelapco.com
Subject: Merry Christmas!
MessageID: 279811DD325
Report: ClamAV: postcard.christmas.index.jpg1560.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.jpg1560.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulag@sfelapco.com
Subject: Merry Christmas!
MessageID: B0DAD1DD325
Report: ClamAV: postcard.christmas.jpg2448.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bavuhoz@sfelapco.com
Subject: Merry Christmas!
MessageID: DED2B1DD325
Report: ClamAV: link.postcard.christmas.index.gif0028.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif0028.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: metir@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: CF56E1DD325
Report: ClamAV: link.postcard.christmas.index.php5042.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dacis@sfelapco.com
Subject: Merry Christmas!
MessageID: BCFF51DD325
Report: ClamAV: postcard.christmas.gif8636.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ciha@sfelapco.com
Subject: Merry Christmas!
MessageID: 2C4B71DD325
Report: ClamAV: postcard.christmas.index.gif4506.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: onip@sfelapco.com
Subject: Merry Christmas!
MessageID: EB5711DD325
Report: ClamAV: link.postcard.christmas.index.gif6621.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rupus@sfelapco.com
Subject: Merry Christmas!
MessageID: 3EA4F1DD325
Report: ClamAV: postcard.christmas.php3126.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dohive@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: CB8B41DD325
Report: ClamAV: postcard.christmas.index.php3717.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.php3717.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vodusec@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: D33B41DD325
Report: ClamAV: link.postcard.christmas.htm3832.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm3832.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ogaroz@sfelapco.com
Subject: Merry Christmas!
MessageID: 182231DD325
Report: ClamAV: postcard.index.php3722.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tosa@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 696D81DD325
Report: ClamAV: link.postcard.jpg1300.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pifiko@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 260A51DD325
Report: ClamAV: postcard.christmas.index.gif5700.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jobod@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 2B3891DD325
Report: ClamAV: postcard.jpg4628.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: epuza@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: DEF0D1DD325
Report: ClamAV: postcard.php8088.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubod@sfelapco.com
Subject: Merry Christmas!
MessageID: 491F01DD325
Report: ClamAV: link.postcard.index.gif5815.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujov@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 7DB6B1DD325
Report: ClamAV: link.postcard.christmas.php7033.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juwo@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: BD8031DD325
Report: ClamAV: postcard.index.htm1787.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm1787.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fupu@sfelapco.com
Subject: Merry Christmas!
MessageID: A97691DD325
Report: ClamAV: link.postcard.index.jpg3864.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg3864.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dufi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 5A8EE1DD325
Report: ClamAV: link.postcard.index.gif5127.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lirogob@sfelapco.com
Subject: Merry Christmas!
MessageID: DDF171DD325
Report: ClamAV: postcard.christmas.gif6438.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mozi@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 1EC341DD325
Report: ClamAV: link.postcard.christmas.gif7433.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.gif7433.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tode@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: EB6F81DD325
Report: ClamAV: link.postcard.index.php5633.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php5633.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sase@sfelapco.com
Subject: Merry Christmas!
MessageID: 31CD61DD325
Report: ClamAV: postcard.christmas.gif4584.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tuzu@sfelapco.com
Subject: Merry Christmas!
MessageID: BE62C1DD325
Report: ClamAV: link.postcard.christmas.index.htm6036.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eciju@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 858FE1DD325
Report: ClamAV: postcard.christmas.index.gif8023.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seba@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 2F15B1DD325
Report: ClamAV: link.postcard.christmas.gif7117.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dasu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 57C691DD325
Report: ClamAV: link.postcard.php0005.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kefofo@sfelapco.com
Subject: Merry Christmas!
MessageID: 3488D1DD325
Report: ClamAV: link.postcard.christmas.index.php8642.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duuwih@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 3D4DE1DD325
Report: ClamAV: postcard.index.htm5021.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rine@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 28CA31DD325
Report: ClamAV: postcard.index.jpg0162.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uuwu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 73E5A1DD325
Report: ClamAV: postcard.christmas.php1347.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: migi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 83B8D1DD325
Report: ClamAV: postcard.christmas.index.jpg4131.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rufu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 745F01DD325
Report: ClamAV: link.postcard.htm3845.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gove@sfelapco.com
Subject: Merry Christmas!
MessageID: DECEA1DD325
Report: ClamAV: link.postcard.christmas.index.htm4354.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm4354.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zahub@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: CD66D1DD325
Report: ClamAV: link.postcard.index.gif2340.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pomi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 80FBB1DD325
Report: ClamAV: postcard.christmas.jpg0885.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg0885.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ovogat@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 614231DD325
Report: ClamAV: link.postcard.christmas.index.htm4456.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cocu@sfelapco.com
Subject: Merry Christmas!
MessageID: B4D9B1DD325
Report: ClamAV: postcard.index.jpg1602.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg1602.cmd)

Jan 5
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: meuk@sfelapco.com
Subject: Merry Christmas!
MessageID: 66EDD1DD325
Report: ClamAV: link.postcard.htm5303.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: unujopu@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: A21181DD325
Report: ClamAV: link.postcard.christmas.index.jpg8017.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuhuu@sfelapco.com
Subject: Merry Christmas!
MessageID: 8D0D71DD325
Report: ClamAV: link.postcard.christmas.index.htm4056.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm4056.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zoda@sfelapco.com
Subject: Merry Christmas!
MessageID: 7332C1DD325
Report: ClamAV: postcard.index.php5052.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: odudor@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: E150C1DD325
Report: ClamAV: postcard.christmas.php8342.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: afuw@sfelapco.com
Subject: Merry Christmas!
MessageID: D89B81DD325
Report: ClamAV: link.postcard.christmas.gif1741.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif1741.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: afupihi@sfelapco.com
Subject: Merry Christmas!
MessageID: EE3B21DD325
Report: ClamAV: link.postcard.christmas.index.jpg8584.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.jpg8584.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zivi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 2F9B01DD325
Report: ClamAV: postcard.php5053.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vawenu@sfelapco.com
Subject: Merry Christmas!
MessageID: 1B3F71DD325
Report: ClamAV: postcard.christmas.index.gif1804.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nefu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 95B501DD325
Report: ClamAV: link.postcard.christmas.htm6000.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm6000.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuda@sfelapco.com
Subject: Merry Christmas!
MessageID: D7F031DD325
Report: ClamAV: postcard.christmas.gif4218.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif4218.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rono@sfelapco.com
Subject: Merry Christmas!
MessageID: 481E41DD325
Report: ClamAV: postcard.christmas.php5858.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php5858.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sevudep@sfelapco.com
Subject: Merry Christmas!
MessageID: C14CD1DD325
Report: ClamAV: postcard.index.php2356.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: isiviv@sfelapco.com
Subject: Merry Christmas!
MessageID: BE1251DD325
Report: ClamAV: link.postcard.jpg2726.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugif@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 88A8D1DD325
Report: ClamAV: postcard.christmas.index.php5722.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.php5722.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jauv@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 4BBC61DD325
Report: ClamAV: link.postcard.christmas.htm7650.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coud@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 30BE01DD325
Report: ClamAV: postcard.christmas.php2000.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.php2000.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lowe@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 6D7701DD325
Report: ClamAV: postcard.index.gif0881.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: waul@sfelapco.com
Subject: Merry Christmas!
MessageID: 0EF3E1DD325
Report: ClamAV: postcard.gif1158.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.gif1158.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ceni@sfelapco.com
Subject: Merry Christmas!
MessageID: C7F931DD326
Report: ClamAV: postcard.christmas.index.php3105.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: unew@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 044B81DD325
Report: ClamAV: postcard.php2533.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uzum@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: C1AE21DD325
Report: ClamAV: link.postcard.gif3382.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujito@sfelapco.com
Subject: Merry Christmas!
MessageID: 659431DD325
Report: ClamAV: postcard.php7280.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ebib@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 5827C1DD325
Report: ClamAV: postcard.htm1450.zip contains Worm.Zafi.D

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@sfelapco.com
Subject: RE: Message Notify
MessageID: 9ED6D1DD325
Report: ClamAV: Nervous_illnesses.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (Nervous_illnesses.scr)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bikokup@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 390EA1DD325
Report: ClamAV: postcard.index.php3021.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: viun@sfelapco.com
Subject: Merry Christmas!
MessageID: 7B9CD1DD325
Report: ClamAV: postcard.index.php0347.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kifefe@sfelapco.com
Subject: Merry Christmas!
MessageID: 4979E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg0454.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wohutod@sfelapco.com
Subject: Merry Christmas!
MessageID: 835BB1DD325
Report: ClamAV: postcard.christmas.htm8818.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm8818.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jate@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 5FA861DD325
Report: ClamAV: postcard.christmas.gif0424.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif0424.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uufap@sfelapco.com
Subject: Merry Christmas!
MessageID: 0EC221DD325
Report: ClamAV: postcard.gif1287.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utat@sfelapco.com
Subject: Merry Christmas!
MessageID: 93E5C1DD325
Report: ClamAV: link.postcard.php5646.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gado@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 2F1B61DD325
Report: ClamAV: postcard.christmas.htm5257.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm5257.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uzopu@sfelapco.com
Subject: Merry Christmas!
MessageID: 738401DD325
Report: ClamAV: postcard.jpg0124.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: didopos@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 0BA6B1DD325
Report: ClamAV: link.postcard.gif6428.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: solazor@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 739D11DD325
Report: ClamAV: link.postcard.jpg7107.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.jpg7107.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uwav@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 774ED1DD325
Report: ClamAV: postcard.index.php4114.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php4114.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: usug@sfelapco.com
Subject: Merry Christmas!
MessageID: 6D33F1DD325
Report: ClamAV: link.postcard.index.gif0318.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jinouto@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 3FA731DD325
Report: ClamAV: link.postcard.christmas.php0604.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php0604.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: amigu@sfelapco.com
Subject: Merry Christmas!
MessageID: A13911DD325
Report: ClamAV: link.postcard.christmas.index.gif2837.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gido@sfelapco.com
Subject: Merry Christmas!
MessageID: BA5E01DD325
Report: ClamAV: link.postcard.christmas.index.gif8532.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dapo@sfelapco.com
Subject: Merry Christmas!
MessageID: 862E91DD325
Report: ClamAV: link.postcard.christmas.index.gif8017.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif8017.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cagu@sfelapco.com
Subject: Merry Christmas!
MessageID: 98D961DD325
Report: ClamAV: link.postcard.christmas.jpg2078.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ogiu@sfelapco.com
Subject: Merry Christmas!
MessageID: EC3371DD325
Report: ClamAV: postcard.htm6673.zip contains Worm.Zafi.D

Jan 4
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: azigiw@xxx
Subject: Re: Merry Christmas!
MessageID: 4D0461DD325
Report: ClamAV: link.postcard.christmas.index.php0407.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gozezu@xxx
Subject: Merry Christmas!
MessageID: 0EDEB1DD325
Report: ClamAV: postcard.index.htm4175.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm4175.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mede@xxx
Subject: Fw: Merry Christmas!
MessageID: 5EF7A1DD325
Report: ClamAV: link.postcard.htm0310.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rasuur@xxx
Subject: Merry Christmas!
MessageID: D73931DD325
Report: ClamAV: postcard.christmas.jpg1180.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg1180.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemuk@xxx
Subject: Re: Merry Christmas!
MessageID: F14201DD325
Report: ClamAV: link.postcard.christmas.jpg2760.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wiriw@xxx
Subject: Merry Christmas!
MessageID: B1D9C1DD325
Report: ClamAV: postcard.christmas.htm1424.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm1424.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ocalau@xxx
Subject: Merry Christmas!
MessageID: 2FAAC1DD325
Report: ClamAV: link.postcard.christmas.index.gif0120.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif0120.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: edunou@xxx
Subject: Merry Christmas!
MessageID: 32EAD1DD325
Report: ClamAV: postcard.index.gif3703.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uveh@xxx
Subject: Merry Christmas!
MessageID: 0B2411DD325
Report: ClamAV: postcard.index.gif6422.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jirom@xxx
Subject: Merry Christmas!
MessageID: 52FC41DD325
Report: ClamAV: postcard.christmas.index.jpg1081.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pawi@xxx
Subject: Fw: Merry Christmas!
MessageID: 063821DD325
Report: ClamAV: link.postcard.index.jpg7833.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zogaro@xxx
Subject: Fw: Merry Christmas!
MessageID: 5B01F1DD325
Report: ClamAV: postcard.htm1643.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm1643.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aris@xxx
Subject: Re: Merry Christmas!
MessageID: 7522F1DD325
Report: ClamAV: link.postcard.christmas.jpg2275.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.jpg2275.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gizofuk@xxx
Subject: Merry Christmas!
MessageID: EFC1E1DD325
Report: ClamAV: postcard.christmas.index.php2065.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hobagi@xxx
Subject: Merry Christmas!
MessageID: CFEB11DD325
Report: ClamAV: postcard.index.gif6837.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.gif6837.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wetit@xxx
Subject: Re: Merry Christmas!
MessageID: 1F7FB1DD325
Report: ClamAV: link.postcard.christmas.index.php6870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jaugaka@xxx
Subject: Re: Merry Christmas!
MessageID: 5E9FC1DD325
Report: ClamAV: postcard.index.jpg5252.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jogo@xxx
Subject: Merry Christmas!
MessageID: B0EC41DD325
Report: ClamAV: postcard.christmas.jpg1156.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tuluw@xxx
Subject: Fw: Merry Christmas!
MessageID: 8E4F21DD325
Report: ClamAV: link.postcard.christmas.index.php3502.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php3502.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gujozat@xxx
Subject: Merry Christmas!
MessageID: 24A271DD325
Report: ClamAV: link.postcard.christmas.index.php5174.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php5174.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jarib@xxx
Subject: Re: Merry Christmas!
MessageID: 81B8E1DD325
Report: ClamAV: link.postcard.christmas.php8144.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jera@xxx
Subject: Re: Merry Christmas!
MessageID: EBDA11DD325
Report: ClamAV: postcard.christmas.htm0861.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm0861.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cevi@xxx
Subject: Merry Christmas!
MessageID: 021A81DD325
Report: ClamAV: postcard.index.jpg0233.zip contains Worm.Zafi.D


Sender:
IP Address: 167.181.33.37
Recipient: error_mail@xxx
Subject: Delivery Status Notification (Failure)
MessageID: 694521DD325
Report: ClamAV: re_mail.scr contains Worm.Sober.I
MailScanner: Windows Screensavers are often used to hide viruses (re_mail.scr)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gabo@xxx
Subject: Merry Christmas!
MessageID: 4E52E1DD325
Report: ClamAV: link.postcard.christmas.htm6486.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm6486.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nafe@xxx
Subject: Merry Christmas!
MessageID: A34EA1DD325
Report: ClamAV: link.postcard.index.php0810.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php0810.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: reno@xxx
Subject: Merry Christmas!
MessageID: 2235B1DD325
Report: ClamAV: link.postcard.christmas.gif4453.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zina@xxx
Subject: Fw: Merry Christmas!
MessageID: 57FEE1DD325
Report: ClamAV: postcard.index.htm3071.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gipudu@xxx
Subject: Re: Merry Christmas!
MessageID: 65BBA1DD325
Report: ClamAV: postcard.christmas.gif7244.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif7244.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coji@xxx
Subject: Merry Christmas!
MessageID: 87B311DD325
Report: ClamAV: link.postcard.christmas.index.gif3410.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eruu@xxx
Subject: Fw: Merry Christmas!
MessageID: 153CE1DD325
Report: ClamAV: link.postcard.gif4768.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: surujeb@xxx
Subject: Re: Merry Christmas!
MessageID: 538C61DD325
Report: ClamAV: link.postcard.index.gif8650.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.gif8650.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hota@xxx
Subject: Merry Christmas!
MessageID: DF6121DD325
Report: ClamAV: postcard.index.jpg8651.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utuvuwo@xxx
Subject: Merry Christmas!
MessageID: 3E8C71DD325
Report: ClamAV: postcard.christmas.index.gif0020.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: murit@xxx
Subject: Merry Christmas!
MessageID: EF2EC1DD325
Report: ClamAV: link.postcard.christmas.index.htm1860.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vuje@xxx
Subject: Re: Merry Christmas!
MessageID: 054341DD325
Report: ClamAV: postcard.index.php6373.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php6373.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dofajuj@xxx
Subject: Merry Christmas!
MessageID: 1C6701DD325
Report: ClamAV: link.postcard.christmas.index.gif3851.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: niveji@xxx
Subject: Fw: Merry Christmas!
MessageID: 2D5A21DD325
Report: ClamAV: link.postcard.christmas.gif4500.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lobog@xxx
Subject: Re: Merry Christmas!
MessageID: 1780F1DD325
Report: ClamAV: link.postcard.christmas.php0285.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: buwaho@xxx
Subject: Merry Christmas!
MessageID: EC4871DD325
Report: ClamAV: postcard.gif1288.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Document
MessageID: 678571DD325
Report: ClamAV: Alive_condom.exe contains Worm.Bagle.Z
MailScanner: Executable DOS/Windows programs are dangerous in email (Alive_condom.exe)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wifi@xxx
Subject: Merry Christmas!
MessageID: 19CF81DD325
Report: ClamAV: link.postcard.christmas.htm6401.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nefudec@xxx
Subject: Merry Christmas!
MessageID: 4D5D91DD325
Report: ClamAV: link.postcard.christmas.index.gif6276.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif6276.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: peju@xxx
Subject: Fw: Merry Christmas!
MessageID: 25C871DD325
Report: ClamAV: link.postcard.index.gif0065.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ceuge@xxx
Subject: Merry Christmas!
MessageID: 82E7B1DD325
Report: ClamAV: link.postcard.christmas.index.htm0724.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm0724.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jauv@xxx
Subject: Fw: Merry Christmas!
MessageID: 125D81DD325
Report: ClamAV: postcard.christmas.index.php4073.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eucenu@xxx
Subject: Merry Christmas!
MessageID: 484271DD325
Report: ClamAV: link.postcard.christmas.index.gif3376.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif3376.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: licuf@xxx
Subject: Merry Christmas!
MessageID: 53BB91DD325
Report: ClamAV: link.postcard.jpg7436.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.jpg7436.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ezuc@xxx
Subject: Re: Merry Christmas!
MessageID: E789C1DD325
Report: ClamAV: link.postcard.htm3126.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pehaliv@xxx
Subject: Fw: Merry Christmas!
MessageID: 0D3E01DD325
Report: ClamAV: link.postcard.index.htm7354.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.htm7354.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: upir@xxx
Subject: Merry Christmas!
MessageID: 477711DD325
Report: ClamAV: link.postcard.christmas.gif2606.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif2606.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tohe@xxx
Subject: Merry Christmas!
MessageID: F413D1DD325
Report: ClamAV: link.postcard.php2355.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php2355.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuhubef@xxx
Subject: Re: Merry Christmas!
MessageID: 7889E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg3302.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wijan@xxx
Subject: Merry Christmas!
MessageID: D3AD91DD325
Report: ClamAV: link.postcard.christmas.index.gif0006.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duvenor@xxx
Subject: Merry Christmas!
MessageID: 359641DD325
Report: ClamAV: link.postcard.index.jpg3281.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg3281.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: geviv@xxx
Subject: Merry Christmas!
MessageID: 4285F1DD325
Report: ClamAV: postcard.index.gif7355.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uusa@xxx
Subject: Re: Merry Christmas!
MessageID: 749871DD325
Report: ClamAV: link.postcard.jpg3443.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dice@xxx
Subject: Merry Christmas!
MessageID: 2AA941DD325
Report: ClamAV: link.postcard.htm1874.zip contains Worm.Zafi.D

2 new Books
Topic: i-Solv Project
Yey! I bought two (2) new books on December 30, 2004.

One is a low-price edition (hence, no CD) of Dietel & Dietel's "VISUAL BASIC 6: How to program" (Php 525.00) and the other is Sybex's "Mastering Database Programming with Visual Basic 6" (Php 1,195.00).

I'm relieved to discover that I can easily learn these because of my background in BASICA and Clipper/Foxbase.

I've skimmed most of the SAMS book's first 3 chapters. I'm very excited to arrive on Chapter 17 for the two (2) complete applications! :-)

Jan 3
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bozure@xxx
Subject: Re: Merry Christmas!
MessageID: 699981DD325
Report: ClamAV: link.postcard.christmas.index.gif7334.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasa@xxx
Subject: Merry Christmas!
MessageID: 1C22F1DD325
Report: ClamAV: link.postcard.christmas.index.jpg5823.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bicu@xxx
Subject: Re: Merry Christmas!
MessageID: C8ED91DD325
Report: ClamAV: link.postcard.christmas.htm6700.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: damubo@xxx
Subject: Re: Merry Christmas!
MessageID: DFA7C1DD325
Report: ClamAV: link.postcard.christmas.gif8411.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: acutapu@xxx
Subject: Merry Christmas!
MessageID: C784F1DD325
Report: ClamAV: postcard.christmas.php1824.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php1824.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuwa@xxx
Subject: Merry Christmas!
MessageID: 061751DD325
Report: ClamAV: link.postcard.index.php7788.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.php7788.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wigu@xxx
Subject: Re: Merry Christmas!
MessageID: EF0591DD325
Report: ClamAV: postcard.christmas.gif0723.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.gif0723.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juve@xxx
Subject: Merry Christmas!
MessageID: 672BD1DD325
Report: ClamAV: link.postcard.index.gif2510.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: podaz@xxx
Subject: Merry Christmas!
MessageID: C1ED01DD325
Report: ClamAV: postcard.index.htm6257.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm6257.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juwohu@xxx
Subject: Merry Christmas!
MessageID: 349321DD325
Report: ClamAV: link.postcard.christmas.php4065.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php4065.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulum@xxx
Subject: Fw: Merry Christmas!
MessageID: 789EE1DD325
Report: ClamAV: postcard.christmas.htm7734.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm7734.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mucita@xxx
Subject: Re: Merry Christmas!
MessageID: DD64B1DD325
Report: ClamAV: postcard.index.jpg7152.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zere@xxx
Subject: Re: Merry Christmas!
MessageID: 233191DD325
Report: ClamAV: postcard.christmas.index.gif6807.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sude@xxx
Subject: Fw: Merry Christmas!
MessageID: 342361DD325
Report: ClamAV: link.postcard.christmas.php4264.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dihouse@xxx
Subject: Re: Merry Christmas!
MessageID: A0C851DD325
Report: ClamAV: link.postcard.htm4134.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.htm4134.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulur@xxx
Subject: Fw: Merry Christmas!
MessageID: 58C981DD325
Report: ClamAV: link.postcard.christmas.jpg2775.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: petog@xxx
Subject: Re: Merry Christmas!
MessageID: DB7231DD325
Report: ClamAV: postcard.christmas.index.jpg3578.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uruhauz@xxx
Subject: Merry Christmas!
MessageID: DE88A1DD325
Report: ClamAV: link.postcard.php7144.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php7144.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kawu@xxx
Subject: Re: Merry Christmas!
MessageID: B4D641DD325
Report: ClamAV: link.postcard.index.jpg7864.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: repa@xxx
Subject: Merry Christmas!
MessageID: 815AB1DD325
Report: ClamAV: postcard.christmas.jpg8281.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: samiki@xxx
Subject: Re: Merry Christmas!
MessageID: 83AFB1DD325
Report: ClamAV: link.postcard.php8304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucojali@xxx
Subject: Re: Merry Christmas!
MessageID: 603E21DD325
Report: ClamAV: link.postcard.index.htm0756.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm0756.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukefuv@xxx
Subject: Merry Christmas!
MessageID: A12B61DD325
Report: ClamAV: link.postcard.index.gif1004.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wate@xxx
Subject: Merry Christmas!
MessageID: 2A0B41DD325
Report: ClamAV: link.postcard.index.php6013.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php6013.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vonasib@xxx
Subject: Fw: Merry Christmas!
MessageID: DE77F1DD325
Report: ClamAV: postcard.gif3527.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.gif3527.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dakap@xxx
Subject: Merry Christmas!
MessageID: E7ACA1DD325
Report: ClamAV: link.postcard.htm8258.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kuki@xxx
Subject: Merry Christmas!
MessageID: BAB6A1DD325
Report: ClamAV: link.postcard.christmas.htm7351.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duporit@xxx
Subject: Re: Merry Christmas!
MessageID: 15EB01DD325
Report: ClamAV: link.postcard.index.php6512.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.php6512.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seto@xxx
Subject: Re: Merry Christmas!
MessageID: 685EE1DD325
Report: ClamAV: postcard.christmas.index.jpg1433.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.jpg1433.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: desaju@xxx
Subject: Merry Christmas!
MessageID: 412341DD325
Report: ClamAV: link.postcard.christmas.index.php0760.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugib@xxx
Subject: Fw: Merry Christmas!
MessageID: 7114E1DD325
Report: ClamAV: link.postcard.htm7578.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: meru@xxx
Subject: Fw: Merry Christmas!
MessageID: 1D4381DD325
Report: ClamAV: postcard.christmas.htm6048.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wojiu@xxx
Subject: Merry Christmas!
MessageID: 3BD0A1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuno@xxx
Subject: Merry Christmas!
MessageID: 4B9771DD325
Report: ClamAV: link.postcard.christmas.htm8547.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: giluuh@xxx
Subject: Re: Merry Christmas!
MessageID: 21A3D1DD325
Report: ClamAV: link.postcard.christmas.htm4221.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iubumab@xxx
Subject: Merry Christmas!
MessageID: 4B2C91DD325
Report: ClamAV: link.postcard.index.htm4871.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kecu@xxx
Subject: Merry Christmas!
MessageID: 9A8431DD325
Report: ClamAV: postcard.php0814.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vemofad@xxx
Subject: Merry Christmas!
MessageID: 3237A1DD325
Report: ClamAV: link.postcard.gif2777.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.gif2777.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hofe@xxx
Subject: Merry Christmas!
MessageID: 556951DD325
Report: ClamAV: postcard.christmas.php7240.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suzo@xxx
Subject: Merry Christmas!
MessageID: E94891DD325
Report: ClamAV: link.postcard.index.jpg5745.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg5745.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pelu@xxx
Subject: Re: Merry Christmas!
MessageID: 9F3DD1DD325
Report: ClamAV: link.postcard.index.php6766.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Hello
MessageID: A35531DD325
Report: ClamAV: Details.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (Details.scr)

Dec 30
Topic: Viruses
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Changes..
MessageID: 3D5831DD325
Report: ClamAV: MoreInfo.exe contains Worm.Bagle.Z
MailScanner: Executable DOS/Windows programs are dangerous in email (MoreInfo.exe)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: RE: Text message
MessageID: B78641DD325
Report: ClamAV: text_document.zip contains Worm.Bagle.Gen-zippwd

Dec 29
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kocok@xxx
Subject: Merry Christmas!
MessageID: 6253D1DD325
Report: ClamAV: link.postcard.php3508.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukir@xxx
Subject: Merry Christmas!
MessageID: 9D0501DD326
Report: ClamAV: link.postcard.htm0143.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: voma@xxx
Subject: Fw: Merry Christmas!
MessageID: 3AB0F1DD325
Report: ClamAV: postcard.christmas.jpg2187.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2187.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: safi@xxx
Subject: Merry Christmas!
MessageID: 1AA7E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7318.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.jpg7318.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rake@xxx
Subject: Merry Christmas!
MessageID: 614421DD325
Report: ClamAV: postcard.jpg0304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mikuma@xxx
Subject: Merry Christmas!
MessageID: D26051DD325
Report: ClamAV: postcard.christmas.jpg4511.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wenon@xxx
Subject: Merry Christmas!
MessageID: 8ADCA1DD326
Report: ClamAV: postcard.index.htm5141.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.htm5141.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fimepub@xxx
Subject: Merry Christmas!
MessageID: 299531DD325
Report: ClamAV: link.postcard.index.php3785.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: olukid@xxx
Subject: Merry Christmas!
MessageID: 95E571DD325
Report: ClamAV: link.postcard.index.php7865.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: emupiv@xxx
Subject: Fw: Merry Christmas!
MessageID: 8353E1DD325
Report: ClamAV: link.postcard.jpg2274.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wirasa@xxx
Subject: Fw: Merry Christmas!
MessageID: 222B01DD325
Report: ClamAV: postcard.christmas.index.gif6236.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasu@xxx
Subject: Fw: Merry Christmas!
MessageID: B547F1DD325
Report: ClamAV: link.postcard.php2664.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suvek@xxx
Subject: Merry Christmas!
MessageID: 3CCD01DD325
Report: ClamAV: postcard.index.gif3431.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vesi@xxx
Subject: Fw: Merry Christmas!
MessageID: 631281DD325
Report: ClamAV: postcard.christmas.index.htm4582.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm4582.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: irec@xxx
Subject: Re: Merry Christmas!
MessageID: 885431DD325
Report: ClamAV: postcard.christmas.gif0837.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif0837.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: datamic@xxx
Subject: Re: Merry Christmas!
MessageID: E434C1DD325
Report: ClamAV: postcard.christmas.index.htm0768.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uvev@xxx
Subject: Re: Merry Christmas!
MessageID: A975B1DD325
Report: ClamAV: postcard.christmas.gif1134.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duzir@xxx
Subject: Fw: Merry Christmas!
MessageID: 19FDB1DD325
Report: ClamAV: link.postcard.index.jpg1747.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zopo@xxx
Subject: Re: Merry Christmas!
MessageID: 035361DD325
Report: ClamAV: link.postcard.christmas.index.htm3674.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ikiw@xxx
Subject: Merry Christmas!
MessageID: 221D51DD325
Report: ClamAV: postcard.christmas.index.php3876.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cofaj@xxx
Subject: Merry Christmas!
MessageID: D2B1F1DD325
Report: ClamAV: postcard.christmas.jpg0317.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg0317.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rotu@xxx
Subject: Re: Merry Christmas!
MessageID: 671FF1DD325
Report: ClamAV: link.postcard.index.php6704.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ipacafa@xxx
Subject: Merry Christmas!
MessageID: 99F271DD325
Report: ClamAV: link.postcard.index.htm4406.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uloh@xxx
Subject: Merry Christmas!
MessageID: D31F91DD325
Report: ClamAV: link.postcard.christmas.php2621.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: todu@xxx
Subject: Fw: Merry Christmas!
MessageID: B9B1B1DD325
Report: ClamAV: link.postcard.christmas.index.jpg4734.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg4734.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jize@xxx
Subject: Re: Merry Christmas!
MessageID: 5BEA01DD325
Report: ClamAV: link.postcard.christmas.php7607.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php7607.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: atiu@xxx
Subject: Merry Christmas!
MessageID: F0FA91DD325
Report: ClamAV: postcard.htm0871.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aligide@xxx
Subject: Merry Christmas!
MessageID: F1DF31DD325
Report: ClamAV: postcard.christmas.htm4000.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm4000.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: titi@xxx
Subject: Merry Christmas!
MessageID: B212C1DD325
Report: ClamAV: link.postcard.christmas.index.jpg5631.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cadu@xxx
Subject: Fw: Merry Christmas!
MessageID: 929BB1DD325
Report: ClamAV: link.postcard.index.gif7105.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iheca@xxx
Subject: Merry Christmas!
MessageID: E11EF1DD325
Report: ClamAV: postcard.christmas.jpg4406.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg4406.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vate@xxx
Subject: Fw: Merry Christmas!
MessageID: 900A91DD325
Report: ClamAV: postcard.christmas.gif5304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cume@xxx
Subject: Fw: Merry Christmas!
MessageID: F13A71DD325
Report: ClamAV: postcard.php1417.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wilizis@xxx
Subject: Merry Christmas!
MessageID: 1FA001DD325
Report: ClamAV: link.postcard.christmas.index.php0436.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fazepi@xxx
Subject: Merry Christmas!
MessageID: 0B9D61DD325
Report: ClamAV: postcard.index.htm7866.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vedi@xxx
Subject: Re: Merry Christmas!
MessageID: 8B3611DD325
Report: ClamAV: postcard.jpg6277.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uuzuvuf@xxx
Subject: Fw: Merry Christmas!
MessageID: E0CF51DD325
Report: ClamAV: postcard.christmas.index.htm5628.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm5628.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cabas@xxx
Subject: Merry Christmas!
MessageID: 0FD6A1DD325
Report: ClamAV: postcard.christmas.index.jpg2280.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.jpg2280.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemevez@xxx
Subject: Merry Christmas!
MessageID: 611811DD325
Report: ClamAV: link.postcard.php0218.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rulu@xxx
Subject: Merry Christmas!
MessageID: 483251DD325
Report: ClamAV: link.postcard.index.jpg6852.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: imiw@xxx
Subject: Fw: Merry Christmas!
MessageID: 85C9D1DD325
Report: ClamAV: postcard.christmas.index.gif0653.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sufa@xxx
Subject: Re: Merry Christmas!
MessageID: 25FF91DD325
Report: ClamAV: link.postcard.index.htm5130.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.htm5130.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iude@xxx
Subject: Re: Merry Christmas!
MessageID: 28EA31DD325
Report: ClamAV: link.postcard.index.jpg1323.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg1323.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fovo@xxx
Subject: Merry Christmas!
MessageID: 99F301DD325
Report: ClamAV: link.postcard.php5370.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php5370.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: biver@xxx
Subject: Merry Christmas!
MessageID: 0D81A1DD325
Report: ClamAV: postcard.christmas.jpg0880.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ediz@xxx
Subject: Re: Merry Christmas!
MessageID: 30AA31DD325
Report: ClamAV: postcard.christmas.index.gif4823.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.gif4823.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poma@xxx
Subject: Fw: Merry Christmas!
MessageID: 9BB2A1DD325
Report: ClamAV: link.postcard.christmas.htm3106.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm3106.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: beji@xxx
Subject: Merry Christmas!
MessageID: B7A061DD325
Report: ClamAV: postcard.jpg1742.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.jpg1742.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jidi@xxx
Subject: Re: Merry Christmas!
MessageID: E6CDB1DD325
Report: ClamAV: link.postcard.christmas.php2313.zip contains Worm.Zafi.D

Dec 28
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gudi@xxx
Subject: Merry Christmas!
MessageID: D38AE1DD325
Report: ClamAV: link.postcard.christmas.index.php6063.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php6063.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: onolep@xxx
Subject: Fw: Merry Christmas!
MessageID: ED4DD1DD325
Report: ClamAV: postcard.christmas.index.php2752.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.php2752.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kopi@xxx
Subject: Merry Christmas!
MessageID: 55B361DD325
Report: ClamAV: link.postcard.christmas.index.htm0237.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fodu@xxx
Subject: Merry Christmas!
MessageID: 446861DD325
Report: ClamAV: postcard.christmas.htm3227.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm3227.cmd)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: D394F1DD325
Report: ClamAV: Cat.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (Cat.com)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubifoni@xxx
Subject: Merry Christmas!
MessageID: 694E71DD325
Report: ClamAV: postcard.gif4635.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.gif4635.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: monekil@xxx
Subject: Fw: Merry Christmas!
MessageID: 4EDB51DD325
Report: ClamAV: link.postcard.index.gif2300.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.gif2300.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cade@xxx
Subject: Merry Christmas!
MessageID: C30C41DD325
Report: ClamAV: link.postcard.christmas.index.gif8828.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zegacal@xxx
Subject: Re: Merry Christmas!
MessageID: 5E8911DD325
Report: ClamAV: postcard.christmas.index.jpg6238.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fivo@xxx
Subject: Merry Christmas!
MessageID: 902611DD325
Report: ClamAV: postcard.index.gif5372.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mila@xxx
Subject: Re: Merry Christmas!
MessageID: 3CB391DD325
Report: ClamAV: link.postcard.index.htm5123.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm5123.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubedik@xxx
Subject: Merry Christmas!
MessageID: 4A92E1DD325
Report: ClamAV: link.postcard.christmas.index.php5084.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mogavi@xxx
Subject: Re: Merry Christmas!
MessageID: 2FD5B1DD325
Report: ClamAV: postcard.gif7406.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cefi@xxx
Subject: Merry Christmas!
MessageID: 255AF1DD325
Report: ClamAV: link.postcard.jpg5803.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.jpg5803.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasamu@xxx
Subject: Merry Christmas!
MessageID: 2165B1DD325
Report: ClamAV: link.postcard.index.htm0428.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ufevuwa@xxx
Subject: Merry Christmas!
MessageID: 300AB1DD325
Report: ClamAV: postcard.christmas.index.php3751.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: leso@xxx
Subject: Fw: Merry Christmas!
MessageID: 27A911DD325
Report: ClamAV: link.postcard.index.gif6801.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.gif6801.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sewi@xxx
Subject: Re: Merry Christmas!
MessageID: F0ED91DD325
Report: ClamAV: postcard.jpg1167.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: osid@xxx
Subject: Merry Christmas!
MessageID: 4225E1DD325
Report: ClamAV: link.postcard.christmas.index.php3020.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wafi@xxx
Subject: Merry Christmas!
MessageID: 820A71DD325
Report: ClamAV: link.postcard.christmas.index.php2635.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iram@xxx
Subject: Merry Christmas!
MessageID: C84B21DD325
Report: ClamAV: link.postcard.htm0706.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sizu@xxx
Subject: Merry Christmas!
MessageID: 970631DD325
Report: ClamAV: postcard.christmas.gif5811.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cici@xxx
Subject: Re: Merry Christmas!
MessageID: 1497B1DD325
Report: ClamAV: link.postcard.index.htm1028.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm1028.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pate@xxx
Subject: Merry Christmas!
MessageID: D9F2A1DD325
Report: ClamAV: postcard.php3147.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Thanks :)
MessageID: 0EF121DD325
Report: ClamAV: the_message.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (the_message.scr)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nifiwus@xxx
Subject: Fw: Merry Christmas!
MessageID: 8FA731DD325
Report: ClamAV: postcard.htm8541.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm8541.cmd)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 933931DD325
Report: ClamAV: Cat.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (Cat.com)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ibeza@xxx
Subject: Fw: Merry Christmas!
MessageID: 75E721DD325
Report: ClamAV: postcard.index.jpg6670.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg6670.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hoca@xxx
Subject: Re: Merry Christmas!
MessageID: A72FC1DD325
Report: ClamAV: postcard.christmas.index.gif2058.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif2058.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bisimir@xxx
Subject: Merry Christmas!
MessageID: 7767A1DD325
Report: ClamAV: postcard.christmas.jpg8672.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nuta@xxx
Subject: Merry Christmas!
MessageID: 43C161DD325
Report: ClamAV: postcard.index.php1862.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nise@xxx
Subject: Merry Christmas!
MessageID: C2EAB1DD325
Report: ClamAV: postcard.index.jpg1268.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.jpg1268.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lalo@xxx
Subject: Merry Christmas!
MessageID: 4F4CC1DD325
Report: ClamAV: postcard.christmas.jpg2233.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2233.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mefi@xxx
Subject: Fw: Merry Christmas!
MessageID: 7948F1DD325
Report: ClamAV: link.postcard.index.jpg3113.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: reku@xxx
Subject: Merry Christmas!
MessageID: 532DB1DD325
Report: ClamAV: link.postcard.php7027.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seda@xxx
Subject: Fw: Merry Christmas!
MessageID: E75461DD325
Report: ClamAV: postcard.htm6487.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm6487.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nirasid@xxx
Subject: Re: Merry Christmas!
MessageID: 45F5E1DD325
Report: ClamAV: postcard.index.jpg8312.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sotimow@xxx
Subject: Re: Merry Christmas!
MessageID: 007821DD325
Report: ClamAV: postcard.index.htm5582.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm5582.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vuzisi@xxx
Subject: Merry Christmas!
MessageID: 5F88F1DD325
Report: ClamAV: link.postcard.christmas.index.php7883.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php7883.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ropetut@xxx
Subject: Merry Christmas!
MessageID: 1B6841DD325
Report: ClamAV: link.postcard.christmas.index.php1358.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php1358.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: idajoso@xxx
Subject: Merry Christmas!
MessageID: AC7A91DD325
Report: ClamAV: postcard.index.jpg1326.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: taciz@xxx
Subject: Merry Christmas!
MessageID: 7CD321DD325
Report: ClamAV: link.postcard.index.jpg6113.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sepib@xxx
Subject: Merry Christmas!
MessageID: 466BF1DD325
Report: ClamAV: postcard.christmas.index.htm1515.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gimem@xxx
Subject: Merry Christmas!
MessageID: 35C9C1DD325
Report: ClamAV: postcard.jpg4747.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dizape@xxx
Subject: Re: Merry Christmas!
MessageID: 97ECD1DD325
Report: ClamAV: postcard.php3534.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: roka@xxx
Subject: Fw: Merry Christmas!
MessageID: 801B01DD325
Report: ClamAV: postcard.php1158.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.php1158.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: paje@xxx
Subject: Merry Christmas!
MessageID: 219F71DD325
Report: ClamAV: postcard.christmas.index.gif0541.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif0541.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: biritak@xxx
Subject: Re: Merry Christmas!
MessageID: 602F61DD325
Report: ClamAV: link.postcard.christmas.index.htm1502.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubiu@xxx
Subject: Re: Merry Christmas!
MessageID: 716071DD325
Report: ClamAV: link.postcard.index.jpg6305.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg6305.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jiki@xxx
Subject: Merry Christmas!
MessageID: 79B7B1DD325
Report: ClamAV: link.postcard.htm3863.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gezi@xxx
Subject: Fw: Merry Christmas!
MessageID: DC4C91DD325
Report: ClamAV: postcard.christmas.jpg2274.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2274.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kufa@xxx
Subject: Fw: Merry Christmas!
MessageID: 46F861DD325
Report: ClamAV: link.postcard.christmas.gif2330.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif2330.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kineme@xxx
Subject: Re: Merry Christmas!
MessageID: C55F81DD325
Report: ClamAV: link.postcard.htm4741.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zumewez@xxx
Subject: Merry Christmas!
MessageID: A594F1DD325
Report: ClamAV: link.postcard.index.php5742.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lawo@xxx
Subject: Re: Merry Christmas!
MessageID: 93FB81DD325
Report: ClamAV: postcard.php4112.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemes@xxx
Subject: Merry Christmas!
MessageID: 266231DD325
Report: ClamAV: postcard.index.php8584.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hogufe@xxx
Subject: Fw: Merry Christmas!
MessageID: 48D5F1DD325
Report: ClamAV: postcard.christmas.index.gif6464.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif6464.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulehuma@xxx
Subject: Merry Christmas!
MessageID: 9B1611DD325
Report: ClamAV: postcard.htm6160.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.htm6160.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rojo@xxx
Subject: Merry Christmas!
MessageID: 771A21DD325
Report: ClamAV: postcard.christmas.php4802.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php4802.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zesa@xxx
Subject: Merry Christmas!
MessageID: AD4BB1DD325
Report: ClamAV: link.postcard.php7827.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php7827.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ciko@xxx
Subject: Merry Christmas!
MessageID: 090991DD325
Report: ClamAV: postcard.christmas.index.htm4431.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vozeuut@xxx
Subject: Merry Christmas!
MessageID: 755811DD325
Report: ClamAV: link.postcard.christmas.htm8761.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm8761.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zeku@xxx
Subject: Fw: Merry Christmas!
MessageID: E8E3B1DD325
Report: ClamAV: postcard.christmas.gif2016.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif2016.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mucun@xxx
Subject: Merry Christmas!
MessageID: 020601DD325
Report: ClamAV: link.postcard.gif7376.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cowi@xxx
Subject: Fw: Merry Christmas!
MessageID: E744E1DD325
Report: ClamAV: link.postcard.index.php5285.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php5285.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ovefa@xxx
Subject: Merry Christmas!
MessageID: A050F1DD325
Report: ClamAV: postcard.christmas.index.gif3257.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: abile@xxx
Subject: Fw: Merry Christmas!
MessageID: 3F69C1DD325
Report: ClamAV: link.postcard.christmas.index.php4746.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php4746.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kepi@xxx
Subject: Re: Merry Christmas!
MessageID: 1E4361DD325
Report: ClamAV: postcard.gif7684.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ufozija@xxx
Subject: Re: Merry Christmas!
MessageID: 0A4491DD325
Report: ClamAV: link.postcard.jpg2768.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mauva@xxx
Subject: Merry Christmas!
MessageID: 64B9D1DD325
Report: ClamAV: link.postcard.christmas.index.php1144.zip contains Worm.Zafi.D

Dec 27
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: C62291DD325
Report: ClamAV: foto2.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (foto2.cpl)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: New changes
MessageID: 3C9ED1DD325
Report: ClamAV: You_will_answer_to_me.hta contains Worm.Bagle.Gen-vbs
MailScanner: HTML archives are very dangerous in email (You_will_answer_to_me.hta)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: D20171DD325
Report: ClamAV: foto1.com contains Worm.Bagle.AG
MailScanner: Executable DOS/Windows programs are dangerous in email (foto1.com)