Nov. 19
Topic: Viruses
The following e-mail messages were found to have viruses in them (all sent to "ate jo"):

Sender: user_info@hotmail.com
IP Address: 165.243.0.230
Subject: FwD: Your Password
MessageID: AD34B1DD325
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (hotmail6846.eml.com)

Sender: jingks0118@yahoo.com
IP Address: 165.243.0.226
Subject: Oh God it's
MessageID: 8F0011DD325
Report: MailScanner: Windows Screensavers are often used to hide viruses (oh_nono.scr)

Sender: webmaster@lge.com
IP Address: 165.243.0.230
Subject: invalid mail
MessageID: 5E6FB1DD325
Report: MailScanner: Executable DOS/Windows programs are dangerous in email (re_mail.txt.com)

Sender: webmaster@yahoo.com
IP Address: 165.243.0.226
Recipient: joel@sfelapco.com
Subject: Mail Error
MessageID: A7D3D1DD325
Report: ClamAV: auto__mail.yahoo_8406.scr contains Worm.Sober.I
MailScanner: Windows Screensavers are often used to hide viruses (auto__mail.yahoo_8406.scr)

Sender: cps-requests@verisign.com
IP Address: 165.243.0.231
Subject: Details
MessageID: 0FEBA1DD325
Report: ClamAV: im_shocked5721.DOC.zip contains Worm.Sober.I

Sender: info@lge.com
IP Address: 165.243.0.230
Subject: Re: Your mail password
MessageID: D43C21DD325
Report: ClamAV: lge.pif contains Worm.Sober.I
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (lge.pif)

Sender: re-mail_system@lge.com
IP Address: 165.243.0.230
Subject: Delivery_failure_notice
MessageID: 8026D1DD325
Report: ClamAV: mail.com contains Worm.Sober.I
MailScanner: Executable DOS/Windows programs are dangerous in email (mail.com)

Sender: error_mail@liteon.com
IP Address: 165.243.0.231
Subject: Mail_Delivery_failure
MessageID: B52721DD325
Report: ClamAV: liteon_2068.zip contains Worm.Sober.I

Posted by Samboy at 12:01 AM WST

Share This Post

Post Comment | Permalink

Viruses
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: frjoeysdb@yahoo.com
IP Address: 203.177.73.196
Subject: Re: Thanks :)
MessageID: D61B21DD325
Report: ClamAV: price.com contains Worm.Bagle.AT
MailScanner: Executable DOS/Windows programs are dangerous in email (price.com)

Nov 17
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: frjoeysdb@yahoo.com
IP Address: 203.177.73.196
Subject: Re:
MessageID: 7B6871DD325
Report: ClamAV: price.scr contains Worm.Bagle.AT
MailScanner: Windows Screensavers are often used to hide viruses (price.scr)

Sender: frjoeysdb@yahoo.com
IP Address: 203.177.73.196
Subject: Re: Thanks :)
MessageID: A8B301DD325
Report: ClamAV: price.cpl contains Worm.Bagle.AT
MailScanner: Control panel items are often used to hide viruses (price.cpl)

Nov 16
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: boy@xxx
IP Address: 203.115.134.54
Recipient: rocky@xxx
Subject: Encrypted document
MessageID: 8529B1DD325
Report: ClamAV: Document.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (Document.scr)

Hmmm... Nothing from Nov. 13 to 15! Yes! :-)

Nov 12 Viruses
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender:
IP Address: 203.131.112.122
Recipient: noreply@xxx
Subject: Undelivered Mail Returned to Sender
MessageID: 166201DD325
Report: ClamAV: .zip contains Worm.Mydoom.I

Sender: boy@xxx
IP Address: 203.115.134.54
Recipient: rocky@xxx
Subject: Forum notify
MessageID: 8CDE61DD325
Report: ClamAV: You_will_answer_to_me.exe contains Worm.Bagle.Z
MailScanner: Executable DOS/Windows programs are dangerous in email (You_will_answer_to_me.exe)

Nov 11 Viruses
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender:
IP Address: 203.131.112.122
Recipient: noreply@xxx
Subject: Undelivered Mail Returned to Sender
MessageID: 4801E1DD325
Report: ClamAV: attachment.zip contains Worm.Mydoom.I

Sender:
IP Address: 203.131.112.122
Recipient: postmaster@xxx
Subject: Undelivered Mail Returned to Sender
MessageID: 8BB791DD325
Report: ClamAV: .zip contains Worm.Mydoom.I

Sender:
IP Address: 203.131.112.122
Recipient: postmaster@xxx
Subject: Undelivered Mail Returned to Sender
MessageID: 8BB791DD325
Report: ClamAV: .zip contains Worm.Mydoom.I

Sender: boy@xxx
IP Address: 203.115.134.54
Recipient: rocky@xxx
Subject: New changes
MessageID: 49F641DD325
Report: ClamAV: Information.vbs contains Worm.Bagle.Gen-vbs
MailScanner: Visual Basic Scripts are dangerous in email (Information.vbs)

Sender: boy@xxx (Hmmm... spoofing?!)
IP Address: 203.115.134.54
Recipient: rocky@xxx
Subject: New changes
MessageID: 49F641DD325
Report: ClamAV: Information.vbs contains Worm.Bagle.Gen-vbs
MailScanner: Visual Basic Scripts are dangerous in email (Information.vbs)

Viruses
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender:
IP Address: 203.131.112.122
Recipient: noreply@xxx
Subject: Undelivered Mail Returned to Sender
MessageID: 281D51DD325
Report: ClamAV: message.zip contains Worm.Mydoom.I

Sender:
IP Address: 203.131.112.122
Recipient: postmaster@xxx
Subject: Undelivered Mail Returned to Sender
MessageID: D469A1DD325
Report: ClamAV: hgun.zip contains Worm.Mydoom.I

Viruses
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender:
IP Address: 203.131.112.122
Recipient: postmaster@xxx
Subject: Undelivered Mail Returned to Sender
MessageID: BACCB1DD42C
Report: ClamAV: .zip contains Worm.Mydoom.I

The following organs are likely to have a virus:

My lungs. :-( It's my fourth fever-laden day on the job! And no one appreciates it at all! :-(

Mailscanner
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender:
IP Address: 203.131.112.122
Recipient: postmaster@xxx
Subject: Undelivered Mail Returned to Sender
MessageID: B9C5B1DD42A
Report: ClamAV: message.zip contains Worm.Mydoom.I

Viruses
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender:
IP Address: 203.131.112.122
Recipient: postmaster@xxx
Subject: Undelivered Mail Returned to Sender
MessageID: BF8581DD42A
Report: ClamAV: attachment.zip contains Worm.Mydoom.I

Sender: yourdailysavers@qfv.bntdr4u.com
IP Address: 210.5.122.16
Subject: Mail Delivery (failure xxx)
MessageID: EE7F41DD42A
Report: MailScanner: Found dangerous IFrame tag in HTML message
Report: ClamAV: message.scr contains Worm.SomeFool.P
MailScanner: Windows Screensavers are often used to hide viruses (message.scr)

Sender:
IP Address: 209.51.142.234
Subject: Mail delivery failed: returning message to sender
MessageID: 4B1BE1DD42A
Report: ClamAV: msg-21361-11.txt contains Worm.SomeFool.P