Jan. 10 Meeting
Mood:  a-ok
Topic: i-Solv Project
Sir Alex, Sir Jing, and Ms. Maricel came to our office and we held the meeting at the Board Room from 11am to around 6pm.

We "reviewed" the previously-discussed Billing Cycle and they asked about the fields in Pie's tables to help in their GAP ANALYSIS.

Jan 9
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: small0620@yahoo.com
IP Address: 210.23.175.169
Recipient: 0d01a8c0@xxx
Subject: Protected message
MessageID: 6FB581DD325
Report: ClamAV: Alive_condom.cpl contains Worm.Bagle.AC
MailScanner: Control panel items are often used to hide viruses (Alive_condom.cpl)

Jan 8
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Subject: Fax Message Received
MessageID: 0F5B91DD325
Report: ClamAV: Message.hta contains Worm.Bagle.Gen-vbs
MailScanner: HTML archives are very dangerous in email (Message.hta)

HAH! The Zafi-D infected computer has been blocked by postfix. No more mails from it!

Jan 6
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nivo@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: BC2D21DD325
Report: ClamAV: link.postcard.christmas.index.gif1550.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif1550.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucuw@sfelapco.com
Subject: Merry Christmas!
MessageID: CC46D1DD325
Report: ClamAV: postcard.index.htm7444.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm7444.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rihil@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 2DB5B1DD325
Report: ClamAV: postcard.index.jpg6677.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: woke@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 00B621DD325
Report: ClamAV: postcard.php2556.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.php2556.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suwitaf@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 50F451DD325
Report: ClamAV: link.postcard.christmas.index.gif4743.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucede@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 2877A1DD325
Report: ClamAV: postcard.php8582.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hogum@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 456B11DD325
Report: ClamAV: link.postcard.christmas.htm1875.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm1875.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kifu@sfelapco.com
Subject: Merry Christmas!
MessageID: 282E31DD325
Report: ClamAV: postcard.index.htm5857.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm5857.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mamac@sfelapco.com
Subject: Merry Christmas!
MessageID: 279811DD325
Report: ClamAV: postcard.christmas.index.jpg1560.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.jpg1560.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulag@sfelapco.com
Subject: Merry Christmas!
MessageID: B0DAD1DD325
Report: ClamAV: postcard.christmas.jpg2448.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bavuhoz@sfelapco.com
Subject: Merry Christmas!
MessageID: DED2B1DD325
Report: ClamAV: link.postcard.christmas.index.gif0028.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif0028.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: metir@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: CF56E1DD325
Report: ClamAV: link.postcard.christmas.index.php5042.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dacis@sfelapco.com
Subject: Merry Christmas!
MessageID: BCFF51DD325
Report: ClamAV: postcard.christmas.gif8636.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ciha@sfelapco.com
Subject: Merry Christmas!
MessageID: 2C4B71DD325
Report: ClamAV: postcard.christmas.index.gif4506.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: onip@sfelapco.com
Subject: Merry Christmas!
MessageID: EB5711DD325
Report: ClamAV: link.postcard.christmas.index.gif6621.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rupus@sfelapco.com
Subject: Merry Christmas!
MessageID: 3EA4F1DD325
Report: ClamAV: postcard.christmas.php3126.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dohive@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: CB8B41DD325
Report: ClamAV: postcard.christmas.index.php3717.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.php3717.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vodusec@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: D33B41DD325
Report: ClamAV: link.postcard.christmas.htm3832.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm3832.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ogaroz@sfelapco.com
Subject: Merry Christmas!
MessageID: 182231DD325
Report: ClamAV: postcard.index.php3722.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tosa@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 696D81DD325
Report: ClamAV: link.postcard.jpg1300.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pifiko@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 260A51DD325
Report: ClamAV: postcard.christmas.index.gif5700.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jobod@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 2B3891DD325
Report: ClamAV: postcard.jpg4628.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: epuza@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: DEF0D1DD325
Report: ClamAV: postcard.php8088.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubod@sfelapco.com
Subject: Merry Christmas!
MessageID: 491F01DD325
Report: ClamAV: link.postcard.index.gif5815.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujov@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 7DB6B1DD325
Report: ClamAV: link.postcard.christmas.php7033.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juwo@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: BD8031DD325
Report: ClamAV: postcard.index.htm1787.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm1787.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fupu@sfelapco.com
Subject: Merry Christmas!
MessageID: A97691DD325
Report: ClamAV: link.postcard.index.jpg3864.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg3864.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dufi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 5A8EE1DD325
Report: ClamAV: link.postcard.index.gif5127.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lirogob@sfelapco.com
Subject: Merry Christmas!
MessageID: DDF171DD325
Report: ClamAV: postcard.christmas.gif6438.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mozi@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 1EC341DD325
Report: ClamAV: link.postcard.christmas.gif7433.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.gif7433.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tode@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: EB6F81DD325
Report: ClamAV: link.postcard.index.php5633.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php5633.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sase@sfelapco.com
Subject: Merry Christmas!
MessageID: 31CD61DD325
Report: ClamAV: postcard.christmas.gif4584.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tuzu@sfelapco.com
Subject: Merry Christmas!
MessageID: BE62C1DD325
Report: ClamAV: link.postcard.christmas.index.htm6036.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eciju@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 858FE1DD325
Report: ClamAV: postcard.christmas.index.gif8023.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seba@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 2F15B1DD325
Report: ClamAV: link.postcard.christmas.gif7117.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dasu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 57C691DD325
Report: ClamAV: link.postcard.php0005.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kefofo@sfelapco.com
Subject: Merry Christmas!
MessageID: 3488D1DD325
Report: ClamAV: link.postcard.christmas.index.php8642.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duuwih@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 3D4DE1DD325
Report: ClamAV: postcard.index.htm5021.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rine@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 28CA31DD325
Report: ClamAV: postcard.index.jpg0162.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uuwu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 73E5A1DD325
Report: ClamAV: postcard.christmas.php1347.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: migi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 83B8D1DD325
Report: ClamAV: postcard.christmas.index.jpg4131.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rufu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 745F01DD325
Report: ClamAV: link.postcard.htm3845.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gove@sfelapco.com
Subject: Merry Christmas!
MessageID: DECEA1DD325
Report: ClamAV: link.postcard.christmas.index.htm4354.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm4354.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zahub@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: CD66D1DD325
Report: ClamAV: link.postcard.index.gif2340.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pomi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 80FBB1DD325
Report: ClamAV: postcard.christmas.jpg0885.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg0885.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ovogat@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 614231DD325
Report: ClamAV: link.postcard.christmas.index.htm4456.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cocu@sfelapco.com
Subject: Merry Christmas!
MessageID: B4D9B1DD325
Report: ClamAV: postcard.index.jpg1602.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg1602.cmd)

Jan 5
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: meuk@sfelapco.com
Subject: Merry Christmas!
MessageID: 66EDD1DD325
Report: ClamAV: link.postcard.htm5303.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: unujopu@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: A21181DD325
Report: ClamAV: link.postcard.christmas.index.jpg8017.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuhuu@sfelapco.com
Subject: Merry Christmas!
MessageID: 8D0D71DD325
Report: ClamAV: link.postcard.christmas.index.htm4056.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm4056.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zoda@sfelapco.com
Subject: Merry Christmas!
MessageID: 7332C1DD325
Report: ClamAV: postcard.index.php5052.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: odudor@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: E150C1DD325
Report: ClamAV: postcard.christmas.php8342.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: afuw@sfelapco.com
Subject: Merry Christmas!
MessageID: D89B81DD325
Report: ClamAV: link.postcard.christmas.gif1741.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif1741.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: afupihi@sfelapco.com
Subject: Merry Christmas!
MessageID: EE3B21DD325
Report: ClamAV: link.postcard.christmas.index.jpg8584.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.jpg8584.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zivi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 2F9B01DD325
Report: ClamAV: postcard.php5053.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vawenu@sfelapco.com
Subject: Merry Christmas!
MessageID: 1B3F71DD325
Report: ClamAV: postcard.christmas.index.gif1804.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nefu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 95B501DD325
Report: ClamAV: link.postcard.christmas.htm6000.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm6000.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuda@sfelapco.com
Subject: Merry Christmas!
MessageID: D7F031DD325
Report: ClamAV: postcard.christmas.gif4218.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif4218.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rono@sfelapco.com
Subject: Merry Christmas!
MessageID: 481E41DD325
Report: ClamAV: postcard.christmas.php5858.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php5858.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sevudep@sfelapco.com
Subject: Merry Christmas!
MessageID: C14CD1DD325
Report: ClamAV: postcard.index.php2356.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: isiviv@sfelapco.com
Subject: Merry Christmas!
MessageID: BE1251DD325
Report: ClamAV: link.postcard.jpg2726.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugif@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 88A8D1DD325
Report: ClamAV: postcard.christmas.index.php5722.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.php5722.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jauv@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 4BBC61DD325
Report: ClamAV: link.postcard.christmas.htm7650.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coud@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 30BE01DD325
Report: ClamAV: postcard.christmas.php2000.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.php2000.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lowe@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 6D7701DD325
Report: ClamAV: postcard.index.gif0881.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: waul@sfelapco.com
Subject: Merry Christmas!
MessageID: 0EF3E1DD325
Report: ClamAV: postcard.gif1158.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.gif1158.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ceni@sfelapco.com
Subject: Merry Christmas!
MessageID: C7F931DD326
Report: ClamAV: postcard.christmas.index.php3105.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: unew@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 044B81DD325
Report: ClamAV: postcard.php2533.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uzum@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: C1AE21DD325
Report: ClamAV: link.postcard.gif3382.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujito@sfelapco.com
Subject: Merry Christmas!
MessageID: 659431DD325
Report: ClamAV: postcard.php7280.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ebib@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 5827C1DD325
Report: ClamAV: postcard.htm1450.zip contains Worm.Zafi.D

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@sfelapco.com
Subject: RE: Message Notify
MessageID: 9ED6D1DD325
Report: ClamAV: Nervous_illnesses.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (Nervous_illnesses.scr)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bikokup@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 390EA1DD325
Report: ClamAV: postcard.index.php3021.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: viun@sfelapco.com
Subject: Merry Christmas!
MessageID: 7B9CD1DD325
Report: ClamAV: postcard.index.php0347.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kifefe@sfelapco.com
Subject: Merry Christmas!
MessageID: 4979E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg0454.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wohutod@sfelapco.com
Subject: Merry Christmas!
MessageID: 835BB1DD325
Report: ClamAV: postcard.christmas.htm8818.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm8818.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jate@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 5FA861DD325
Report: ClamAV: postcard.christmas.gif0424.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif0424.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uufap@sfelapco.com
Subject: Merry Christmas!
MessageID: 0EC221DD325
Report: ClamAV: postcard.gif1287.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utat@sfelapco.com
Subject: Merry Christmas!
MessageID: 93E5C1DD325
Report: ClamAV: link.postcard.php5646.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gado@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 2F1B61DD325
Report: ClamAV: postcard.christmas.htm5257.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm5257.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uzopu@sfelapco.com
Subject: Merry Christmas!
MessageID: 738401DD325
Report: ClamAV: postcard.jpg0124.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: didopos@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 0BA6B1DD325
Report: ClamAV: link.postcard.gif6428.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: solazor@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 739D11DD325
Report: ClamAV: link.postcard.jpg7107.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.jpg7107.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uwav@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 774ED1DD325
Report: ClamAV: postcard.index.php4114.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php4114.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: usug@sfelapco.com
Subject: Merry Christmas!
MessageID: 6D33F1DD325
Report: ClamAV: link.postcard.index.gif0318.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jinouto@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 3FA731DD325
Report: ClamAV: link.postcard.christmas.php0604.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php0604.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: amigu@sfelapco.com
Subject: Merry Christmas!
MessageID: A13911DD325
Report: ClamAV: link.postcard.christmas.index.gif2837.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gido@sfelapco.com
Subject: Merry Christmas!
MessageID: BA5E01DD325
Report: ClamAV: link.postcard.christmas.index.gif8532.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dapo@sfelapco.com
Subject: Merry Christmas!
MessageID: 862E91DD325
Report: ClamAV: link.postcard.christmas.index.gif8017.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif8017.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cagu@sfelapco.com
Subject: Merry Christmas!
MessageID: 98D961DD325
Report: ClamAV: link.postcard.christmas.jpg2078.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ogiu@sfelapco.com
Subject: Merry Christmas!
MessageID: EC3371DD325
Report: ClamAV: postcard.htm6673.zip contains Worm.Zafi.D

Jan 4
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: azigiw@xxx
Subject: Re: Merry Christmas!
MessageID: 4D0461DD325
Report: ClamAV: link.postcard.christmas.index.php0407.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gozezu@xxx
Subject: Merry Christmas!
MessageID: 0EDEB1DD325
Report: ClamAV: postcard.index.htm4175.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm4175.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mede@xxx
Subject: Fw: Merry Christmas!
MessageID: 5EF7A1DD325
Report: ClamAV: link.postcard.htm0310.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rasuur@xxx
Subject: Merry Christmas!
MessageID: D73931DD325
Report: ClamAV: postcard.christmas.jpg1180.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg1180.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemuk@xxx
Subject: Re: Merry Christmas!
MessageID: F14201DD325
Report: ClamAV: link.postcard.christmas.jpg2760.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wiriw@xxx
Subject: Merry Christmas!
MessageID: B1D9C1DD325
Report: ClamAV: postcard.christmas.htm1424.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm1424.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ocalau@xxx
Subject: Merry Christmas!
MessageID: 2FAAC1DD325
Report: ClamAV: link.postcard.christmas.index.gif0120.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif0120.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: edunou@xxx
Subject: Merry Christmas!
MessageID: 32EAD1DD325
Report: ClamAV: postcard.index.gif3703.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uveh@xxx
Subject: Merry Christmas!
MessageID: 0B2411DD325
Report: ClamAV: postcard.index.gif6422.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jirom@xxx
Subject: Merry Christmas!
MessageID: 52FC41DD325
Report: ClamAV: postcard.christmas.index.jpg1081.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pawi@xxx
Subject: Fw: Merry Christmas!
MessageID: 063821DD325
Report: ClamAV: link.postcard.index.jpg7833.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zogaro@xxx
Subject: Fw: Merry Christmas!
MessageID: 5B01F1DD325
Report: ClamAV: postcard.htm1643.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm1643.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aris@xxx
Subject: Re: Merry Christmas!
MessageID: 7522F1DD325
Report: ClamAV: link.postcard.christmas.jpg2275.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.jpg2275.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gizofuk@xxx
Subject: Merry Christmas!
MessageID: EFC1E1DD325
Report: ClamAV: postcard.christmas.index.php2065.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hobagi@xxx
Subject: Merry Christmas!
MessageID: CFEB11DD325
Report: ClamAV: postcard.index.gif6837.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.gif6837.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wetit@xxx
Subject: Re: Merry Christmas!
MessageID: 1F7FB1DD325
Report: ClamAV: link.postcard.christmas.index.php6870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jaugaka@xxx
Subject: Re: Merry Christmas!
MessageID: 5E9FC1DD325
Report: ClamAV: postcard.index.jpg5252.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jogo@xxx
Subject: Merry Christmas!
MessageID: B0EC41DD325
Report: ClamAV: postcard.christmas.jpg1156.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tuluw@xxx
Subject: Fw: Merry Christmas!
MessageID: 8E4F21DD325
Report: ClamAV: link.postcard.christmas.index.php3502.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php3502.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gujozat@xxx
Subject: Merry Christmas!
MessageID: 24A271DD325
Report: ClamAV: link.postcard.christmas.index.php5174.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php5174.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jarib@xxx
Subject: Re: Merry Christmas!
MessageID: 81B8E1DD325
Report: ClamAV: link.postcard.christmas.php8144.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jera@xxx
Subject: Re: Merry Christmas!
MessageID: EBDA11DD325
Report: ClamAV: postcard.christmas.htm0861.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm0861.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cevi@xxx
Subject: Merry Christmas!
MessageID: 021A81DD325
Report: ClamAV: postcard.index.jpg0233.zip contains Worm.Zafi.D


Sender:
IP Address: 167.181.33.37
Recipient: error_mail@xxx
Subject: Delivery Status Notification (Failure)
MessageID: 694521DD325
Report: ClamAV: re_mail.scr contains Worm.Sober.I
MailScanner: Windows Screensavers are often used to hide viruses (re_mail.scr)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gabo@xxx
Subject: Merry Christmas!
MessageID: 4E52E1DD325
Report: ClamAV: link.postcard.christmas.htm6486.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm6486.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nafe@xxx
Subject: Merry Christmas!
MessageID: A34EA1DD325
Report: ClamAV: link.postcard.index.php0810.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php0810.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: reno@xxx
Subject: Merry Christmas!
MessageID: 2235B1DD325
Report: ClamAV: link.postcard.christmas.gif4453.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zina@xxx
Subject: Fw: Merry Christmas!
MessageID: 57FEE1DD325
Report: ClamAV: postcard.index.htm3071.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gipudu@xxx
Subject: Re: Merry Christmas!
MessageID: 65BBA1DD325
Report: ClamAV: postcard.christmas.gif7244.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif7244.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coji@xxx
Subject: Merry Christmas!
MessageID: 87B311DD325
Report: ClamAV: link.postcard.christmas.index.gif3410.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eruu@xxx
Subject: Fw: Merry Christmas!
MessageID: 153CE1DD325
Report: ClamAV: link.postcard.gif4768.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: surujeb@xxx
Subject: Re: Merry Christmas!
MessageID: 538C61DD325
Report: ClamAV: link.postcard.index.gif8650.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.gif8650.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hota@xxx
Subject: Merry Christmas!
MessageID: DF6121DD325
Report: ClamAV: postcard.index.jpg8651.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utuvuwo@xxx
Subject: Merry Christmas!
MessageID: 3E8C71DD325
Report: ClamAV: postcard.christmas.index.gif0020.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: murit@xxx
Subject: Merry Christmas!
MessageID: EF2EC1DD325
Report: ClamAV: link.postcard.christmas.index.htm1860.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vuje@xxx
Subject: Re: Merry Christmas!
MessageID: 054341DD325
Report: ClamAV: postcard.index.php6373.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php6373.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dofajuj@xxx
Subject: Merry Christmas!
MessageID: 1C6701DD325
Report: ClamAV: link.postcard.christmas.index.gif3851.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: niveji@xxx
Subject: Fw: Merry Christmas!
MessageID: 2D5A21DD325
Report: ClamAV: link.postcard.christmas.gif4500.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lobog@xxx
Subject: Re: Merry Christmas!
MessageID: 1780F1DD325
Report: ClamAV: link.postcard.christmas.php0285.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: buwaho@xxx
Subject: Merry Christmas!
MessageID: EC4871DD325
Report: ClamAV: postcard.gif1288.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Document
MessageID: 678571DD325
Report: ClamAV: Alive_condom.exe contains Worm.Bagle.Z
MailScanner: Executable DOS/Windows programs are dangerous in email (Alive_condom.exe)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wifi@xxx
Subject: Merry Christmas!
MessageID: 19CF81DD325
Report: ClamAV: link.postcard.christmas.htm6401.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nefudec@xxx
Subject: Merry Christmas!
MessageID: 4D5D91DD325
Report: ClamAV: link.postcard.christmas.index.gif6276.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif6276.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: peju@xxx
Subject: Fw: Merry Christmas!
MessageID: 25C871DD325
Report: ClamAV: link.postcard.index.gif0065.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ceuge@xxx
Subject: Merry Christmas!
MessageID: 82E7B1DD325
Report: ClamAV: link.postcard.christmas.index.htm0724.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm0724.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jauv@xxx
Subject: Fw: Merry Christmas!
MessageID: 125D81DD325
Report: ClamAV: postcard.christmas.index.php4073.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eucenu@xxx
Subject: Merry Christmas!
MessageID: 484271DD325
Report: ClamAV: link.postcard.christmas.index.gif3376.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif3376.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: licuf@xxx
Subject: Merry Christmas!
MessageID: 53BB91DD325
Report: ClamAV: link.postcard.jpg7436.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.jpg7436.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ezuc@xxx
Subject: Re: Merry Christmas!
MessageID: E789C1DD325
Report: ClamAV: link.postcard.htm3126.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pehaliv@xxx
Subject: Fw: Merry Christmas!
MessageID: 0D3E01DD325
Report: ClamAV: link.postcard.index.htm7354.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.htm7354.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: upir@xxx
Subject: Merry Christmas!
MessageID: 477711DD325
Report: ClamAV: link.postcard.christmas.gif2606.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif2606.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tohe@xxx
Subject: Merry Christmas!
MessageID: F413D1DD325
Report: ClamAV: link.postcard.php2355.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php2355.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuhubef@xxx
Subject: Re: Merry Christmas!
MessageID: 7889E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg3302.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wijan@xxx
Subject: Merry Christmas!
MessageID: D3AD91DD325
Report: ClamAV: link.postcard.christmas.index.gif0006.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duvenor@xxx
Subject: Merry Christmas!
MessageID: 359641DD325
Report: ClamAV: link.postcard.index.jpg3281.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg3281.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: geviv@xxx
Subject: Merry Christmas!
MessageID: 4285F1DD325
Report: ClamAV: postcard.index.gif7355.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uusa@xxx
Subject: Re: Merry Christmas!
MessageID: 749871DD325
Report: ClamAV: link.postcard.jpg3443.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dice@xxx
Subject: Merry Christmas!
MessageID: 2AA941DD325
Report: ClamAV: link.postcard.htm1874.zip contains Worm.Zafi.D

2 new Books
Topic: i-Solv Project
Yey! I bought two (2) new books on December 30, 2004.

One is a low-price edition (hence, no CD) of Dietel & Dietel's "VISUAL BASIC 6: How to program" (Php 525.00) and the other is Sybex's "Mastering Database Programming with Visual Basic 6" (Php 1,195.00).

I'm relieved to discover that I can easily learn these because of my background in BASICA and Clipper/Foxbase.

I've skimmed most of the SAMS book's first 3 chapters. I'm very excited to arrive on Chapter 17 for the two (2) complete applications! :-)

Jan 3
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bozure@xxx
Subject: Re: Merry Christmas!
MessageID: 699981DD325
Report: ClamAV: link.postcard.christmas.index.gif7334.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasa@xxx
Subject: Merry Christmas!
MessageID: 1C22F1DD325
Report: ClamAV: link.postcard.christmas.index.jpg5823.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bicu@xxx
Subject: Re: Merry Christmas!
MessageID: C8ED91DD325
Report: ClamAV: link.postcard.christmas.htm6700.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: damubo@xxx
Subject: Re: Merry Christmas!
MessageID: DFA7C1DD325
Report: ClamAV: link.postcard.christmas.gif8411.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: acutapu@xxx
Subject: Merry Christmas!
MessageID: C784F1DD325
Report: ClamAV: postcard.christmas.php1824.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php1824.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuwa@xxx
Subject: Merry Christmas!
MessageID: 061751DD325
Report: ClamAV: link.postcard.index.php7788.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.php7788.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wigu@xxx
Subject: Re: Merry Christmas!
MessageID: EF0591DD325
Report: ClamAV: postcard.christmas.gif0723.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.gif0723.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juve@xxx
Subject: Merry Christmas!
MessageID: 672BD1DD325
Report: ClamAV: link.postcard.index.gif2510.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: podaz@xxx
Subject: Merry Christmas!
MessageID: C1ED01DD325
Report: ClamAV: postcard.index.htm6257.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm6257.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juwohu@xxx
Subject: Merry Christmas!
MessageID: 349321DD325
Report: ClamAV: link.postcard.christmas.php4065.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php4065.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulum@xxx
Subject: Fw: Merry Christmas!
MessageID: 789EE1DD325
Report: ClamAV: postcard.christmas.htm7734.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm7734.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mucita@xxx
Subject: Re: Merry Christmas!
MessageID: DD64B1DD325
Report: ClamAV: postcard.index.jpg7152.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zere@xxx
Subject: Re: Merry Christmas!
MessageID: 233191DD325
Report: ClamAV: postcard.christmas.index.gif6807.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sude@xxx
Subject: Fw: Merry Christmas!
MessageID: 342361DD325
Report: ClamAV: link.postcard.christmas.php4264.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dihouse@xxx
Subject: Re: Merry Christmas!
MessageID: A0C851DD325
Report: ClamAV: link.postcard.htm4134.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.htm4134.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulur@xxx
Subject: Fw: Merry Christmas!
MessageID: 58C981DD325
Report: ClamAV: link.postcard.christmas.jpg2775.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: petog@xxx
Subject: Re: Merry Christmas!
MessageID: DB7231DD325
Report: ClamAV: postcard.christmas.index.jpg3578.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uruhauz@xxx
Subject: Merry Christmas!
MessageID: DE88A1DD325
Report: ClamAV: link.postcard.php7144.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php7144.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kawu@xxx
Subject: Re: Merry Christmas!
MessageID: B4D641DD325
Report: ClamAV: link.postcard.index.jpg7864.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: repa@xxx
Subject: Merry Christmas!
MessageID: 815AB1DD325
Report: ClamAV: postcard.christmas.jpg8281.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: samiki@xxx
Subject: Re: Merry Christmas!
MessageID: 83AFB1DD325
Report: ClamAV: link.postcard.php8304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucojali@xxx
Subject: Re: Merry Christmas!
MessageID: 603E21DD325
Report: ClamAV: link.postcard.index.htm0756.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm0756.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukefuv@xxx
Subject: Merry Christmas!
MessageID: A12B61DD325
Report: ClamAV: link.postcard.index.gif1004.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wate@xxx
Subject: Merry Christmas!
MessageID: 2A0B41DD325
Report: ClamAV: link.postcard.index.php6013.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php6013.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vonasib@xxx
Subject: Fw: Merry Christmas!
MessageID: DE77F1DD325
Report: ClamAV: postcard.gif3527.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.gif3527.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dakap@xxx
Subject: Merry Christmas!
MessageID: E7ACA1DD325
Report: ClamAV: link.postcard.htm8258.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kuki@xxx
Subject: Merry Christmas!
MessageID: BAB6A1DD325
Report: ClamAV: link.postcard.christmas.htm7351.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duporit@xxx
Subject: Re: Merry Christmas!
MessageID: 15EB01DD325
Report: ClamAV: link.postcard.index.php6512.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.php6512.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seto@xxx
Subject: Re: Merry Christmas!
MessageID: 685EE1DD325
Report: ClamAV: postcard.christmas.index.jpg1433.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.jpg1433.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: desaju@xxx
Subject: Merry Christmas!
MessageID: 412341DD325
Report: ClamAV: link.postcard.christmas.index.php0760.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugib@xxx
Subject: Fw: Merry Christmas!
MessageID: 7114E1DD325
Report: ClamAV: link.postcard.htm7578.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: meru@xxx
Subject: Fw: Merry Christmas!
MessageID: 1D4381DD325
Report: ClamAV: postcard.christmas.htm6048.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wojiu@xxx
Subject: Merry Christmas!
MessageID: 3BD0A1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuno@xxx
Subject: Merry Christmas!
MessageID: 4B9771DD325
Report: ClamAV: link.postcard.christmas.htm8547.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: giluuh@xxx
Subject: Re: Merry Christmas!
MessageID: 21A3D1DD325
Report: ClamAV: link.postcard.christmas.htm4221.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iubumab@xxx
Subject: Merry Christmas!
MessageID: 4B2C91DD325
Report: ClamAV: link.postcard.index.htm4871.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kecu@xxx
Subject: Merry Christmas!
MessageID: 9A8431DD325
Report: ClamAV: postcard.php0814.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vemofad@xxx
Subject: Merry Christmas!
MessageID: 3237A1DD325
Report: ClamAV: link.postcard.gif2777.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.gif2777.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hofe@xxx
Subject: Merry Christmas!
MessageID: 556951DD325
Report: ClamAV: postcard.christmas.php7240.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suzo@xxx
Subject: Merry Christmas!
MessageID: E94891DD325
Report: ClamAV: link.postcard.index.jpg5745.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg5745.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pelu@xxx
Subject: Re: Merry Christmas!
MessageID: 9F3DD1DD325
Report: ClamAV: link.postcard.index.php6766.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Hello
MessageID: A35531DD325
Report: ClamAV: Details.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (Details.scr)

Dec 30
Topic: Viruses
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Changes..
MessageID: 3D5831DD325
Report: ClamAV: MoreInfo.exe contains Worm.Bagle.Z
MailScanner: Executable DOS/Windows programs are dangerous in email (MoreInfo.exe)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: RE: Text message
MessageID: B78641DD325
Report: ClamAV: text_document.zip contains Worm.Bagle.Gen-zippwd

Dec 29
Topic: Viruses
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kocok@xxx
Subject: Merry Christmas!
MessageID: 6253D1DD325
Report: ClamAV: link.postcard.php3508.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukir@xxx
Subject: Merry Christmas!
MessageID: 9D0501DD326
Report: ClamAV: link.postcard.htm0143.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: voma@xxx
Subject: Fw: Merry Christmas!
MessageID: 3AB0F1DD325
Report: ClamAV: postcard.christmas.jpg2187.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2187.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: safi@xxx
Subject: Merry Christmas!
MessageID: 1AA7E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7318.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.jpg7318.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rake@xxx
Subject: Merry Christmas!
MessageID: 614421DD325
Report: ClamAV: postcard.jpg0304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mikuma@xxx
Subject: Merry Christmas!
MessageID: D26051DD325
Report: ClamAV: postcard.christmas.jpg4511.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wenon@xxx
Subject: Merry Christmas!
MessageID: 8ADCA1DD326
Report: ClamAV: postcard.index.htm5141.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.htm5141.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fimepub@xxx
Subject: Merry Christmas!
MessageID: 299531DD325
Report: ClamAV: link.postcard.index.php3785.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: olukid@xxx
Subject: Merry Christmas!
MessageID: 95E571DD325
Report: ClamAV: link.postcard.index.php7865.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: emupiv@xxx
Subject: Fw: Merry Christmas!
MessageID: 8353E1DD325
Report: ClamAV: link.postcard.jpg2274.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wirasa@xxx
Subject: Fw: Merry Christmas!
MessageID: 222B01DD325
Report: ClamAV: postcard.christmas.index.gif6236.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasu@xxx
Subject: Fw: Merry Christmas!
MessageID: B547F1DD325
Report: ClamAV: link.postcard.php2664.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suvek@xxx
Subject: Merry Christmas!
MessageID: 3CCD01DD325
Report: ClamAV: postcard.index.gif3431.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vesi@xxx
Subject: Fw: Merry Christmas!
MessageID: 631281DD325
Report: ClamAV: postcard.christmas.index.htm4582.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm4582.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: irec@xxx
Subject: Re: Merry Christmas!
MessageID: 885431DD325
Report: ClamAV: postcard.christmas.gif0837.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif0837.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: datamic@xxx
Subject: Re: Merry Christmas!
MessageID: E434C1DD325
Report: ClamAV: postcard.christmas.index.htm0768.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uvev@xxx
Subject: Re: Merry Christmas!
MessageID: A975B1DD325
Report: ClamAV: postcard.christmas.gif1134.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duzir@xxx
Subject: Fw: Merry Christmas!
MessageID: 19FDB1DD325
Report: ClamAV: link.postcard.index.jpg1747.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zopo@xxx
Subject: Re: Merry Christmas!
MessageID: 035361DD325
Report: ClamAV: link.postcard.christmas.index.htm3674.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ikiw@xxx
Subject: Merry Christmas!
MessageID: 221D51DD325
Report: ClamAV: postcard.christmas.index.php3876.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cofaj@xxx
Subject: Merry Christmas!
MessageID: D2B1F1DD325
Report: ClamAV: postcard.christmas.jpg0317.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg0317.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rotu@xxx
Subject: Re: Merry Christmas!
MessageID: 671FF1DD325
Report: ClamAV: link.postcard.index.php6704.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ipacafa@xxx
Subject: Merry Christmas!
MessageID: 99F271DD325
Report: ClamAV: link.postcard.index.htm4406.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uloh@xxx
Subject: Merry Christmas!
MessageID: D31F91DD325
Report: ClamAV: link.postcard.christmas.php2621.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: todu@xxx
Subject: Fw: Merry Christmas!
MessageID: B9B1B1DD325
Report: ClamAV: link.postcard.christmas.index.jpg4734.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg4734.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jize@xxx
Subject: Re: Merry Christmas!
MessageID: 5BEA01DD325
Report: ClamAV: link.postcard.christmas.php7607.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php7607.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: atiu@xxx
Subject: Merry Christmas!
MessageID: F0FA91DD325
Report: ClamAV: postcard.htm0871.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aligide@xxx
Subject: Merry Christmas!
MessageID: F1DF31DD325
Report: ClamAV: postcard.christmas.htm4000.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm4000.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: titi@xxx
Subject: Merry Christmas!
MessageID: B212C1DD325
Report: ClamAV: link.postcard.christmas.index.jpg5631.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cadu@xxx
Subject: Fw: Merry Christmas!
MessageID: 929BB1DD325
Report: ClamAV: link.postcard.index.gif7105.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iheca@xxx
Subject: Merry Christmas!
MessageID: E11EF1DD325
Report: ClamAV: postcard.christmas.jpg4406.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg4406.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vate@xxx
Subject: Fw: Merry Christmas!
MessageID: 900A91DD325
Report: ClamAV: postcard.christmas.gif5304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cume@xxx
Subject: Fw: Merry Christmas!
MessageID: F13A71DD325
Report: ClamAV: postcard.php1417.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wilizis@xxx
Subject: Merry Christmas!
MessageID: 1FA001DD325
Report: ClamAV: link.postcard.christmas.index.php0436.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fazepi@xxx
Subject: Merry Christmas!
MessageID: 0B9D61DD325
Report: ClamAV: postcard.index.htm7866.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vedi@xxx
Subject: Re: Merry Christmas!
MessageID: 8B3611DD325
Report: ClamAV: postcard.jpg6277.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uuzuvuf@xxx
Subject: Fw: Merry Christmas!
MessageID: E0CF51DD325
Report: ClamAV: postcard.christmas.index.htm5628.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm5628.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cabas@xxx
Subject: Merry Christmas!
MessageID: 0FD6A1DD325
Report: ClamAV: postcard.christmas.index.jpg2280.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.jpg2280.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemevez@xxx
Subject: Merry Christmas!
MessageID: 611811DD325
Report: ClamAV: link.postcard.php0218.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rulu@xxx
Subject: Merry Christmas!
MessageID: 483251DD325
Report: ClamAV: link.postcard.index.jpg6852.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: imiw@xxx
Subject: Fw: Merry Christmas!
MessageID: 85C9D1DD325
Report: ClamAV: postcard.christmas.index.gif0653.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sufa@xxx
Subject: Re: Merry Christmas!
MessageID: 25FF91DD325
Report: ClamAV: link.postcard.index.htm5130.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.htm5130.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iude@xxx
Subject: Re: Merry Christmas!
MessageID: 28EA31DD325
Report: ClamAV: link.postcard.index.jpg1323.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg1323.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fovo@xxx
Subject: Merry Christmas!
MessageID: 99F301DD325
Report: ClamAV: link.postcard.php5370.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php5370.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: biver@xxx
Subject: Merry Christmas!
MessageID: 0D81A1DD325
Report: ClamAV: postcard.christmas.jpg0880.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ediz@xxx
Subject: Re: Merry Christmas!
MessageID: 30AA31DD325
Report: ClamAV: postcard.christmas.index.gif4823.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.gif4823.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: poma@xxx
Subject: Fw: Merry Christmas!
MessageID: 9BB2A1DD325
Report: ClamAV: link.postcard.christmas.htm3106.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm3106.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: beji@xxx
Subject: Merry Christmas!
MessageID: B7A061DD325
Report: ClamAV: postcard.jpg1742.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.jpg1742.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jidi@xxx
Subject: Re: Merry Christmas!
MessageID: E6CDB1DD325
Report: ClamAV: link.postcard.christmas.php2313.zip contains Worm.Zafi.D