Topic: Viruses
The following e-mail messages were found to have viruses in them:
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: C9A3A1DD325
Report: ClamAV: Secret.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Secret.cpl)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: d01a8c0@xxx
Subject: Merry Christmas!
MessageID: AE7651DD325
Report: ClamAV: postcard.index.htm0447.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pidijuk@xxx
Subject: Merry Christmas!
MessageID: 120991DD325
Report: ClamAV: link.postcard.index.gif5050.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.gif5050.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fefo@xxx
Subject: Merry Christmas!
MessageID: 859BA1DD325
Report: ClamAV: link.postcard.index.jpg8166.zip contains Worm.Zafi.D
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 31FB01DD325
Report: ClamAV: Doll.zip contains Worm.Bagle.Gen-zippwd
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: canes@xxx
Subject: Re: Merry Christmas!
MessageID: 05CE91DD325
Report: ClamAV: link.postcard.christmas.gif7253.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fumu@xxx
Subject: Fw: Merry Christmas!
MessageID: 561571DD325
Report: ClamAV: postcard.christmas.htm2056.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gipohok@xxx
Subject: Re: Merry Christmas!
MessageID: C28C51DD325
Report: ClamAV: link.postcard.php2247.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php2247.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pobe@xxx
Subject: Re: Merry Christmas!
MessageID: 55FE01DD325
Report: ClamAV: link.postcard.gif8163.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: homib@xxx
Subject: Fw: Merry Christmas!
MessageID: 70C1A1DD325
Report: ClamAV: link.postcard.christmas.htm3646.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nofozas@xxx
Subject: Merry Christmas!
MessageID: 070E81DD325
Report: ClamAV: link.postcard.jpg6525.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pesew@xxx
Subject: Re: Merry Christmas!
MessageID: BEB571DD325
Report: ClamAV: link.postcard.christmas.index.php3487.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: alup@xxx
Subject: Fw: Merry Christmas!
MessageID: E2FCB1DD325
Report: ClamAV: postcard.christmas.index.htm7067.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.htm7067.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ouza@xxx
Subject: Merry Christmas!
MessageID: 64C7C1DD325
Report: ClamAV: postcard.christmas.gif3564.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif3564.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: usef@xxx
Subject: Merry Christmas!
MessageID: 933561DD325
Report: ClamAV: postcard.index.jpg3728.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tedo@xxx
Subject: Re: Merry Christmas!
MessageID: 4E03D1DD325
Report: ClamAV: postcard.htm8706.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucez@xxx
Subject: Merry Christmas!
MessageID: C02EC1DD325
Report: ClamAV: postcard.index.htm6114.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.index.htm6114.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: igic@xxx
Subject: Fw: Merry Christmas!
MessageID: 1CBB91DD325
Report: ClamAV: link.postcard.php6123.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php6123.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ovew@xxx
Subject: Merry Christmas!
MessageID: 4C9131DD325
Report: ClamAV: link.postcard.index.htm7076.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: onok@xxx
Subject: Re: Merry Christmas!
MessageID: 712891DD325
Report: ClamAV: postcard.christmas.htm7742.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ofav@xxx
Subject: Re: Merry Christmas!
MessageID: 784701DD325
Report: ClamAV: link.postcard.jpg1456.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: urapuwu@xxx
Subject: Fw: Merry Christmas!
MessageID: 1B0831DD325
Report: ClamAV: postcard.index.php8857.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jufa@xxx
Subject: Re: Merry Christmas!
MessageID: 790A21DD325
Report: ClamAV: postcard.index.gif0534.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tiri@xxx
Subject: Merry Christmas!
MessageID: ED7561DD325
Report: ClamAV: link.postcard.christmas.index.gif8714.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vejiuw@xxx
Subject: Fw: Merry Christmas!
MessageID: B766B1DD325
Report: ClamAV: postcard.christmas.index.jpg0185.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lametu@xxx
Subject: Fw: Merry Christmas!
MessageID: D1E031DD325
Report: ClamAV: postcard.php8036.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fawe@xxx
Subject: Fw: Merry Christmas!
MessageID: EC6601DD325
Report: ClamAV: link.postcard.christmas.htm7487.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm7487.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: heri@xxx
Subject: Fw: Merry Christmas!
MessageID: 4CFD81DD325
Report: ClamAV: link.postcard.gif6648.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.gif6648.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: refe@xxx
Subject: Merry Christmas!
MessageID: A35FF1DD325
Report: ClamAV: postcard.christmas.index.htm3850.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rikor@xxx
Subject: Re: Merry Christmas!
MessageID: 77B1B1DD325
Report: ClamAV: link.postcard.jpg4556.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tojeke@xxx
Subject: Merry Christmas!
MessageID: 791441DD325
Report: ClamAV: postcard.index.jpg2651.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg2651.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wifejih@xxx
Subject: Merry Christmas!
MessageID: C038B1DD325
Report: ClamAV: link.postcard.php1487.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php1487.bat)
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.25
Recipient: amy@xxx
Subject: Re:
MessageID: 6F3951DD325
Report: ClamAV: Dog.cpl contains Worm.Bagle.AG
MailScanner: Control panel items are often used to hide viruses (Dog.cpl)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fewit@xxx
Subject: Fw: Merry Christmas!
MessageID: 759E01DD325
Report: ClamAV: postcard.index.php2568.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fojef@xxx
Subject: Fw: Merry Christmas!
MessageID: 513491DD325
Report: ClamAV: link.postcard.christmas.php6074.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ifuw@xxx
Subject: Re: Merry Christmas!
MessageID: 3DB481DD325
Report: ClamAV: postcard.christmas.index.jpg0147.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utaz@xxx
Subject: Fw: Merry Christmas!
MessageID: F0F731DD325
Report: ClamAV: postcard.index.jpg4452.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ginu@xxx
Subject: Re: Merry Christmas!
MessageID: E83D21DD325
Report: ClamAV: postcard.christmas.index.gif7212.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.gif7212.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sivoke@xxx
Subject: Merry Christmas!
MessageID: B0E291DD325
Report: ClamAV: postcard.christmas.htm2785.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm2785.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wahe@xxx
Subject: Fw: Merry Christmas!
MessageID: ECB681DD325
Report: ClamAV: postcard.index.htm2771.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ohok@xxx
Subject: Merry Christmas!
MessageID: B825F1DD325
Report: ClamAV: postcard.christmas.index.php6350.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ikek@xxx
Subject: Merry Christmas!
MessageID: D39311DD325
Report: ClamAV: postcard.gif4743.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubotac@xxx
Subject: Re: Merry Christmas!
MessageID: 7E2F21DD325
Report: ClamAV: link.postcard.christmas.php7614.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuvecus@xxx
Subject: Fw: Merry Christmas!
MessageID: 05AA91DD325
Report: ClamAV: postcard.christmas.jpg1743.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.jpg1743.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: akoh@xxx
Subject: Re: Merry Christmas!
MessageID: E104D1DD325
Report: ClamAV: link.postcard.christmas.index.php6882.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php6882.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucafib@xxx
Subject: Fw: Merry Christmas!
MessageID: 596AD1DD325
Report: ClamAV: link.postcard.christmas.index.gif5151.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dumaka@xxx
Subject: Merry Christmas!
MessageID: 3257B1DD325
Report: ClamAV: postcard.christmas.jpg2157.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg2157.bat)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hoji@xxx
Subject: Fw: Merry Christmas!
MessageID: BB7C51DD325
Report: ClamAV: link.postcard.christmas.index.jpg1054.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.index.jpg1054.pif)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gagi@xxx
Subject: Merry Christmas!
MessageID: A45511DD325
Report: ClamAV: link.postcard.christmas.php8500.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.php8500.cmd)
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jara@xxx
Subject: Merry Christmas!
MessageID: 6CE441DD325
Report: ClamAV: postcard.christmas.index.gif5634.zip contains Worm.Zafi.D
Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zuwepik@xxx
Subject: Fw: Merry Christmas!
MessageID: 77B6C1DD325
Report: ClamAV: postcard.christmas.htm1767.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm1767.pif)
Posted by Samboy
at 12:01 AM WST