Jan. 21
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender:
IP Address: 195.170.200.72
Recipient: alsdnxs@xxx.net
Subject: Undelivered Mail Returned to Sender
MessageID: 8D8841DD325
Report: ClamAV: Bill.zip contains Worm.SomeFool.AA-2

Jan. 18
Topic: Viruses
The following e-mail messages were found to have viruses in them:

sender: small0620@yahoo.com
IP Address: 203.76.212.191
Recipient: 0d01a8c0@xxx
Subject: Re: Hello
MessageID: B153A1DD325
Report: ClamAV: Info.vbs contains Worm.Bagle.Gen-vbs
MailScanner: Visual Basic Scripts are dangerous in email (Info.vbs)

Plus 85 entries (!) of the following:

sender: promo@accessthatrock.com
IP Address: 207.105.45.78
Recipient: ucuw@xxx (different user names were used in the 23 entries)
Subject: Check out this website!
MessageID: 7D5EA1DD326
Report: MailScanner: JScript Scripts are dangerous in email (rt_s90022a.js)

No more?
Topic: Viruses
GOOD NEWS! No viruses since Jan. 9, 2005. :-)

Jan 9
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: small0620@yahoo.com
IP Address: 210.23.175.169
Recipient: 0d01a8c0@xxx
Subject: Protected message
MessageID: 6FB581DD325
Report: ClamAV: Alive_condom.cpl contains Worm.Bagle.AC
MailScanner: Control panel items are often used to hide viruses (Alive_condom.cpl)

Jan 8
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Subject: Fax Message Received
MessageID: 0F5B91DD325
Report: ClamAV: Message.hta contains Worm.Bagle.Gen-vbs
MailScanner: HTML archives are very dangerous in email (Message.hta)

HAH! The Zafi-D infected computer has been blocked by postfix. No more mails from it!

Jan 6
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nivo@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: BC2D21DD325
Report: ClamAV: link.postcard.christmas.index.gif1550.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif1550.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucuw@sfelapco.com
Subject: Merry Christmas!
MessageID: CC46D1DD325
Report: ClamAV: postcard.index.htm7444.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm7444.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rihil@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 2DB5B1DD325
Report: ClamAV: postcard.index.jpg6677.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: woke@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 00B621DD325
Report: ClamAV: postcard.php2556.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.php2556.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suwitaf@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 50F451DD325
Report: ClamAV: link.postcard.christmas.index.gif4743.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucede@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 2877A1DD325
Report: ClamAV: postcard.php8582.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hogum@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 456B11DD325
Report: ClamAV: link.postcard.christmas.htm1875.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm1875.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kifu@sfelapco.com
Subject: Merry Christmas!
MessageID: 282E31DD325
Report: ClamAV: postcard.index.htm5857.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm5857.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mamac@sfelapco.com
Subject: Merry Christmas!
MessageID: 279811DD325
Report: ClamAV: postcard.christmas.index.jpg1560.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.index.jpg1560.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulag@sfelapco.com
Subject: Merry Christmas!
MessageID: B0DAD1DD325
Report: ClamAV: postcard.christmas.jpg2448.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bavuhoz@sfelapco.com
Subject: Merry Christmas!
MessageID: DED2B1DD325
Report: ClamAV: link.postcard.christmas.index.gif0028.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif0028.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: metir@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: CF56E1DD325
Report: ClamAV: link.postcard.christmas.index.php5042.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dacis@sfelapco.com
Subject: Merry Christmas!
MessageID: BCFF51DD325
Report: ClamAV: postcard.christmas.gif8636.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ciha@sfelapco.com
Subject: Merry Christmas!
MessageID: 2C4B71DD325
Report: ClamAV: postcard.christmas.index.gif4506.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: onip@sfelapco.com
Subject: Merry Christmas!
MessageID: EB5711DD325
Report: ClamAV: link.postcard.christmas.index.gif6621.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rupus@sfelapco.com
Subject: Merry Christmas!
MessageID: 3EA4F1DD325
Report: ClamAV: postcard.christmas.php3126.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dohive@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: CB8B41DD325
Report: ClamAV: postcard.christmas.index.php3717.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.php3717.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vodusec@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: D33B41DD325
Report: ClamAV: link.postcard.christmas.htm3832.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm3832.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ogaroz@sfelapco.com
Subject: Merry Christmas!
MessageID: 182231DD325
Report: ClamAV: postcard.index.php3722.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tosa@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 696D81DD325
Report: ClamAV: link.postcard.jpg1300.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pifiko@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 260A51DD325
Report: ClamAV: postcard.christmas.index.gif5700.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jobod@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 2B3891DD325
Report: ClamAV: postcard.jpg4628.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: epuza@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: DEF0D1DD325
Report: ClamAV: postcard.php8088.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ubod@sfelapco.com
Subject: Merry Christmas!
MessageID: 491F01DD325
Report: ClamAV: link.postcard.index.gif5815.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujov@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 7DB6B1DD325
Report: ClamAV: link.postcard.christmas.php7033.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juwo@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: BD8031DD325
Report: ClamAV: postcard.index.htm1787.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm1787.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: fupu@sfelapco.com
Subject: Merry Christmas!
MessageID: A97691DD325
Report: ClamAV: link.postcard.index.jpg3864.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg3864.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dufi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 5A8EE1DD325
Report: ClamAV: link.postcard.index.gif5127.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lirogob@sfelapco.com
Subject: Merry Christmas!
MessageID: DDF171DD325
Report: ClamAV: postcard.christmas.gif6438.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mozi@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 1EC341DD325
Report: ClamAV: link.postcard.christmas.gif7433.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.gif7433.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tode@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: EB6F81DD325
Report: ClamAV: link.postcard.index.php5633.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php5633.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sase@sfelapco.com
Subject: Merry Christmas!
MessageID: 31CD61DD325
Report: ClamAV: postcard.christmas.gif4584.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tuzu@sfelapco.com
Subject: Merry Christmas!
MessageID: BE62C1DD325
Report: ClamAV: link.postcard.christmas.index.htm6036.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eciju@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 858FE1DD325
Report: ClamAV: postcard.christmas.index.gif8023.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seba@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 2F15B1DD325
Report: ClamAV: link.postcard.christmas.gif7117.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dasu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 57C691DD325
Report: ClamAV: link.postcard.php0005.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kefofo@sfelapco.com
Subject: Merry Christmas!
MessageID: 3488D1DD325
Report: ClamAV: link.postcard.christmas.index.php8642.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duuwih@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 3D4DE1DD325
Report: ClamAV: postcard.index.htm5021.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rine@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 28CA31DD325
Report: ClamAV: postcard.index.jpg0162.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uuwu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 73E5A1DD325
Report: ClamAV: postcard.christmas.php1347.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: migi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 83B8D1DD325
Report: ClamAV: postcard.christmas.index.jpg4131.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rufu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 745F01DD325
Report: ClamAV: link.postcard.htm3845.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gove@sfelapco.com
Subject: Merry Christmas!
MessageID: DECEA1DD325
Report: ClamAV: link.postcard.christmas.index.htm4354.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm4354.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zahub@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: CD66D1DD325
Report: ClamAV: link.postcard.index.gif2340.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pomi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 80FBB1DD325
Report: ClamAV: postcard.christmas.jpg0885.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg0885.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ovogat@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 614231DD325
Report: ClamAV: link.postcard.christmas.index.htm4456.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cocu@sfelapco.com
Subject: Merry Christmas!
MessageID: B4D9B1DD325
Report: ClamAV: postcard.index.jpg1602.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.jpg1602.cmd)

Jan 5
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: meuk@sfelapco.com
Subject: Merry Christmas!
MessageID: 66EDD1DD325
Report: ClamAV: link.postcard.htm5303.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: unujopu@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: A21181DD325
Report: ClamAV: link.postcard.christmas.index.jpg8017.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuhuu@sfelapco.com
Subject: Merry Christmas!
MessageID: 8D0D71DD325
Report: ClamAV: link.postcard.christmas.index.htm4056.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm4056.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zoda@sfelapco.com
Subject: Merry Christmas!
MessageID: 7332C1DD325
Report: ClamAV: postcard.index.php5052.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: odudor@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: E150C1DD325
Report: ClamAV: postcard.christmas.php8342.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: afuw@sfelapco.com
Subject: Merry Christmas!
MessageID: D89B81DD325
Report: ClamAV: link.postcard.christmas.gif1741.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif1741.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: afupihi@sfelapco.com
Subject: Merry Christmas!
MessageID: EE3B21DD325
Report: ClamAV: link.postcard.christmas.index.jpg8584.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.jpg8584.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zivi@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 2F9B01DD325
Report: ClamAV: postcard.php5053.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vawenu@sfelapco.com
Subject: Merry Christmas!
MessageID: 1B3F71DD325
Report: ClamAV: postcard.christmas.index.gif1804.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nefu@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 95B501DD325
Report: ClamAV: link.postcard.christmas.htm6000.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.htm6000.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuda@sfelapco.com
Subject: Merry Christmas!
MessageID: D7F031DD325
Report: ClamAV: postcard.christmas.gif4218.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif4218.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rono@sfelapco.com
Subject: Merry Christmas!
MessageID: 481E41DD325
Report: ClamAV: postcard.christmas.php5858.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php5858.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sevudep@sfelapco.com
Subject: Merry Christmas!
MessageID: C14CD1DD325
Report: ClamAV: postcard.index.php2356.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: isiviv@sfelapco.com
Subject: Merry Christmas!
MessageID: BE1251DD325
Report: ClamAV: link.postcard.jpg2726.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugif@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 88A8D1DD325
Report: ClamAV: postcard.christmas.index.php5722.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.php5722.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jauv@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 4BBC61DD325
Report: ClamAV: link.postcard.christmas.htm7650.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coud@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 30BE01DD325
Report: ClamAV: postcard.christmas.php2000.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.php2000.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lowe@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 6D7701DD325
Report: ClamAV: postcard.index.gif0881.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: waul@sfelapco.com
Subject: Merry Christmas!
MessageID: 0EF3E1DD325
Report: ClamAV: postcard.gif1158.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.gif1158.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ceni@sfelapco.com
Subject: Merry Christmas!
MessageID: C7F931DD326
Report: ClamAV: postcard.christmas.index.php3105.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: unew@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 044B81DD325
Report: ClamAV: postcard.php2533.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uzum@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: C1AE21DD325
Report: ClamAV: link.postcard.gif3382.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ujito@sfelapco.com
Subject: Merry Christmas!
MessageID: 659431DD325
Report: ClamAV: postcard.php7280.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ebib@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 5827C1DD325
Report: ClamAV: postcard.htm1450.zip contains Worm.Zafi.D

Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@sfelapco.com
Subject: RE: Message Notify
MessageID: 9ED6D1DD325
Report: ClamAV: Nervous_illnesses.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (Nervous_illnesses.scr)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bikokup@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 390EA1DD325
Report: ClamAV: postcard.index.php3021.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: viun@sfelapco.com
Subject: Merry Christmas!
MessageID: 7B9CD1DD325
Report: ClamAV: postcard.index.php0347.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kifefe@sfelapco.com
Subject: Merry Christmas!
MessageID: 4979E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg0454.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wohutod@sfelapco.com
Subject: Merry Christmas!
MessageID: 835BB1DD325
Report: ClamAV: postcard.christmas.htm8818.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.htm8818.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jate@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 5FA861DD325
Report: ClamAV: postcard.christmas.gif0424.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif0424.cmd)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uufap@sfelapco.com
Subject: Merry Christmas!
MessageID: 0EC221DD325
Report: ClamAV: postcard.gif1287.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utat@sfelapco.com
Subject: Merry Christmas!
MessageID: 93E5C1DD325
Report: ClamAV: link.postcard.php5646.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gado@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 2F1B61DD325
Report: ClamAV: postcard.christmas.htm5257.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm5257.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uzopu@sfelapco.com
Subject: Merry Christmas!
MessageID: 738401DD325
Report: ClamAV: postcard.jpg0124.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: didopos@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 0BA6B1DD325
Report: ClamAV: link.postcard.gif6428.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: solazor@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 739D11DD325
Report: ClamAV: link.postcard.jpg7107.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.jpg7107.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uwav@sfelapco.com
Subject: Re: Merry Christmas!
MessageID: 774ED1DD325
Report: ClamAV: postcard.index.php4114.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php4114.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: usug@sfelapco.com
Subject: Merry Christmas!
MessageID: 6D33F1DD325
Report: ClamAV: link.postcard.index.gif0318.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jinouto@sfelapco.com
Subject: Fw: Merry Christmas!
MessageID: 3FA731DD325
Report: ClamAV: link.postcard.christmas.php0604.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php0604.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: amigu@sfelapco.com
Subject: Merry Christmas!
MessageID: A13911DD325
Report: ClamAV: link.postcard.christmas.index.gif2837.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gido@sfelapco.com
Subject: Merry Christmas!
MessageID: BA5E01DD325
Report: ClamAV: link.postcard.christmas.index.gif8532.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dapo@sfelapco.com
Subject: Merry Christmas!
MessageID: 862E91DD325
Report: ClamAV: link.postcard.christmas.index.gif8017.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif8017.bat)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cagu@sfelapco.com
Subject: Merry Christmas!
MessageID: 98D961DD325
Report: ClamAV: link.postcard.christmas.jpg2078.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ogiu@sfelapco.com
Subject: Merry Christmas!
MessageID: EC3371DD325
Report: ClamAV: postcard.htm6673.zip contains Worm.Zafi.D

Jan 4
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: azigiw@xxx
Subject: Re: Merry Christmas!
MessageID: 4D0461DD325
Report: ClamAV: link.postcard.christmas.index.php0407.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gozezu@xxx
Subject: Merry Christmas!
MessageID: 0EDEB1DD325
Report: ClamAV: postcard.index.htm4175.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm4175.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mede@xxx
Subject: Fw: Merry Christmas!
MessageID: 5EF7A1DD325
Report: ClamAV: link.postcard.htm0310.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: rasuur@xxx
Subject: Merry Christmas!
MessageID: D73931DD325
Report: ClamAV: postcard.christmas.jpg1180.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.jpg1180.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hemuk@xxx
Subject: Re: Merry Christmas!
MessageID: F14201DD325
Report: ClamAV: link.postcard.christmas.jpg2760.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wiriw@xxx
Subject: Merry Christmas!
MessageID: B1D9C1DD325
Report: ClamAV: postcard.christmas.htm1424.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm1424.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ocalau@xxx
Subject: Merry Christmas!
MessageID: 2FAAC1DD325
Report: ClamAV: link.postcard.christmas.index.gif0120.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif0120.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: edunou@xxx
Subject: Merry Christmas!
MessageID: 32EAD1DD325
Report: ClamAV: postcard.index.gif3703.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uveh@xxx
Subject: Merry Christmas!
MessageID: 0B2411DD325
Report: ClamAV: postcard.index.gif6422.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jirom@xxx
Subject: Merry Christmas!
MessageID: 52FC41DD325
Report: ClamAV: postcard.christmas.index.jpg1081.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pawi@xxx
Subject: Fw: Merry Christmas!
MessageID: 063821DD325
Report: ClamAV: link.postcard.index.jpg7833.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zogaro@xxx
Subject: Fw: Merry Christmas!
MessageID: 5B01F1DD325
Report: ClamAV: postcard.htm1643.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.htm1643.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: aris@xxx
Subject: Re: Merry Christmas!
MessageID: 7522F1DD325
Report: ClamAV: link.postcard.christmas.jpg2275.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.jpg2275.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gizofuk@xxx
Subject: Merry Christmas!
MessageID: EFC1E1DD325
Report: ClamAV: postcard.christmas.index.php2065.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hobagi@xxx
Subject: Merry Christmas!
MessageID: CFEB11DD325
Report: ClamAV: postcard.index.gif6837.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.gif6837.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wetit@xxx
Subject: Re: Merry Christmas!
MessageID: 1F7FB1DD325
Report: ClamAV: link.postcard.christmas.index.php6870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jaugaka@xxx
Subject: Re: Merry Christmas!
MessageID: 5E9FC1DD325
Report: ClamAV: postcard.index.jpg5252.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jogo@xxx
Subject: Merry Christmas!
MessageID: B0EC41DD325
Report: ClamAV: postcard.christmas.jpg1156.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tuluw@xxx
Subject: Fw: Merry Christmas!
MessageID: 8E4F21DD325
Report: ClamAV: link.postcard.christmas.index.php3502.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php3502.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gujozat@xxx
Subject: Merry Christmas!
MessageID: 24A271DD325
Report: ClamAV: link.postcard.christmas.index.php5174.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.php5174.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jarib@xxx
Subject: Re: Merry Christmas!
MessageID: 81B8E1DD325
Report: ClamAV: link.postcard.christmas.php8144.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jera@xxx
Subject: Re: Merry Christmas!
MessageID: EBDA11DD325
Report: ClamAV: postcard.christmas.htm0861.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm0861.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: cevi@xxx
Subject: Merry Christmas!
MessageID: 021A81DD325
Report: ClamAV: postcard.index.jpg0233.zip contains Worm.Zafi.D


Sender:
IP Address: 167.181.33.37
Recipient: error_mail@xxx
Subject: Delivery Status Notification (Failure)
MessageID: 694521DD325
Report: ClamAV: re_mail.scr contains Worm.Sober.I
MailScanner: Windows Screensavers are often used to hide viruses (re_mail.scr)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gabo@xxx
Subject: Merry Christmas!
MessageID: 4E52E1DD325
Report: ClamAV: link.postcard.christmas.htm6486.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.htm6486.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nafe@xxx
Subject: Merry Christmas!
MessageID: A34EA1DD325
Report: ClamAV: link.postcard.index.php0810.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php0810.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: reno@xxx
Subject: Merry Christmas!
MessageID: 2235B1DD325
Report: ClamAV: link.postcard.christmas.gif4453.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zina@xxx
Subject: Fw: Merry Christmas!
MessageID: 57FEE1DD325
Report: ClamAV: postcard.index.htm3071.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: gipudu@xxx
Subject: Re: Merry Christmas!
MessageID: 65BBA1DD325
Report: ClamAV: postcard.christmas.gif7244.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.gif7244.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: coji@xxx
Subject: Merry Christmas!
MessageID: 87B311DD325
Report: ClamAV: link.postcard.christmas.index.gif3410.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eruu@xxx
Subject: Fw: Merry Christmas!
MessageID: 153CE1DD325
Report: ClamAV: link.postcard.gif4768.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: surujeb@xxx
Subject: Re: Merry Christmas!
MessageID: 538C61DD325
Report: ClamAV: link.postcard.index.gif8650.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.gif8650.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hota@xxx
Subject: Merry Christmas!
MessageID: DF6121DD325
Report: ClamAV: postcard.index.jpg8651.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: utuvuwo@xxx
Subject: Merry Christmas!
MessageID: 3E8C71DD325
Report: ClamAV: postcard.christmas.index.gif0020.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: murit@xxx
Subject: Merry Christmas!
MessageID: EF2EC1DD325
Report: ClamAV: link.postcard.christmas.index.htm1860.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vuje@xxx
Subject: Re: Merry Christmas!
MessageID: 054341DD325
Report: ClamAV: postcard.index.php6373.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.php6373.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dofajuj@xxx
Subject: Merry Christmas!
MessageID: 1C6701DD325
Report: ClamAV: link.postcard.christmas.index.gif3851.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: niveji@xxx
Subject: Fw: Merry Christmas!
MessageID: 2D5A21DD325
Report: ClamAV: link.postcard.christmas.gif4500.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: lobog@xxx
Subject: Re: Merry Christmas!
MessageID: 1780F1DD325
Report: ClamAV: link.postcard.christmas.php0285.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: buwaho@xxx
Subject: Merry Christmas!
MessageID: EC4871DD325
Report: ClamAV: postcard.gif1288.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Document
MessageID: 678571DD325
Report: ClamAV: Alive_condom.exe contains Worm.Bagle.Z
MailScanner: Executable DOS/Windows programs are dangerous in email (Alive_condom.exe)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wifi@xxx
Subject: Merry Christmas!
MessageID: 19CF81DD325
Report: ClamAV: link.postcard.christmas.htm6401.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: nefudec@xxx
Subject: Merry Christmas!
MessageID: 4D5D91DD325
Report: ClamAV: link.postcard.christmas.index.gif6276.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif6276.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: peju@xxx
Subject: Fw: Merry Christmas!
MessageID: 25C871DD325
Report: ClamAV: link.postcard.index.gif0065.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ceuge@xxx
Subject: Merry Christmas!
MessageID: 82E7B1DD325
Report: ClamAV: link.postcard.christmas.index.htm0724.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.htm0724.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: jauv@xxx
Subject: Fw: Merry Christmas!
MessageID: 125D81DD325
Report: ClamAV: postcard.christmas.index.php4073.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: eucenu@xxx
Subject: Merry Christmas!
MessageID: 484271DD325
Report: ClamAV: link.postcard.christmas.index.gif3376.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.index.gif3376.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: licuf@xxx
Subject: Merry Christmas!
MessageID: 53BB91DD325
Report: ClamAV: link.postcard.jpg7436.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.jpg7436.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ezuc@xxx
Subject: Re: Merry Christmas!
MessageID: E789C1DD325
Report: ClamAV: link.postcard.htm3126.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pehaliv@xxx
Subject: Fw: Merry Christmas!
MessageID: 0D3E01DD325
Report: ClamAV: link.postcard.index.htm7354.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.htm7354.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: upir@xxx
Subject: Merry Christmas!
MessageID: 477711DD325
Report: ClamAV: link.postcard.christmas.gif2606.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.christmas.gif2606.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: tohe@xxx
Subject: Merry Christmas!
MessageID: F413D1DD325
Report: ClamAV: link.postcard.php2355.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.php2355.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuhubef@xxx
Subject: Re: Merry Christmas!
MessageID: 7889E1DD325
Report: ClamAV: link.postcard.christmas.index.jpg3302.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wijan@xxx
Subject: Merry Christmas!
MessageID: D3AD91DD325
Report: ClamAV: link.postcard.christmas.index.gif0006.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duvenor@xxx
Subject: Merry Christmas!
MessageID: 359641DD325
Report: ClamAV: link.postcard.index.jpg3281.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg3281.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: geviv@xxx
Subject: Merry Christmas!
MessageID: 4285F1DD325
Report: ClamAV: postcard.index.gif7355.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uusa@xxx
Subject: Re: Merry Christmas!
MessageID: 749871DD325
Report: ClamAV: link.postcard.jpg3443.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dice@xxx
Subject: Merry Christmas!
MessageID: 2AA941DD325
Report: ClamAV: link.postcard.htm1874.zip contains Worm.Zafi.D

Jan 3
Topic: Viruses
The following e-mail messages were found to have viruses in them:

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bozure@xxx
Subject: Re: Merry Christmas!
MessageID: 699981DD325
Report: ClamAV: link.postcard.christmas.index.gif7334.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wasa@xxx
Subject: Merry Christmas!
MessageID: 1C22F1DD325
Report: ClamAV: link.postcard.christmas.index.jpg5823.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: bicu@xxx
Subject: Re: Merry Christmas!
MessageID: C8ED91DD325
Report: ClamAV: link.postcard.christmas.htm6700.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: damubo@xxx
Subject: Re: Merry Christmas!
MessageID: DFA7C1DD325
Report: ClamAV: link.postcard.christmas.gif8411.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: acutapu@xxx
Subject: Merry Christmas!
MessageID: C784F1DD325
Report: ClamAV: postcard.christmas.php1824.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.php1824.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuwa@xxx
Subject: Merry Christmas!
MessageID: 061751DD325
Report: ClamAV: link.postcard.index.php7788.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.php7788.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wigu@xxx
Subject: Re: Merry Christmas!
MessageID: EF0591DD325
Report: ClamAV: postcard.christmas.gif0723.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (postcard.christmas.gif0723.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juve@xxx
Subject: Merry Christmas!
MessageID: 672BD1DD325
Report: ClamAV: link.postcard.index.gif2510.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: podaz@xxx
Subject: Merry Christmas!
MessageID: C1ED01DD325
Report: ClamAV: postcard.index.htm6257.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.index.htm6257.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: juwohu@xxx
Subject: Merry Christmas!
MessageID: 349321DD325
Report: ClamAV: link.postcard.christmas.php4065.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.christmas.php4065.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulum@xxx
Subject: Fw: Merry Christmas!
MessageID: 789EE1DD325
Report: ClamAV: postcard.christmas.htm7734.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.htm7734.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: mucita@xxx
Subject: Re: Merry Christmas!
MessageID: DD64B1DD325
Report: ClamAV: postcard.index.jpg7152.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: zere@xxx
Subject: Re: Merry Christmas!
MessageID: 233191DD325
Report: ClamAV: postcard.christmas.index.gif6807.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: sude@xxx
Subject: Fw: Merry Christmas!
MessageID: 342361DD325
Report: ClamAV: link.postcard.christmas.php4264.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dihouse@xxx
Subject: Re: Merry Christmas!
MessageID: A0C851DD325
Report: ClamAV: link.postcard.htm4134.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.htm4134.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ulur@xxx
Subject: Fw: Merry Christmas!
MessageID: 58C981DD325
Report: ClamAV: link.postcard.christmas.jpg2775.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: petog@xxx
Subject: Re: Merry Christmas!
MessageID: DB7231DD325
Report: ClamAV: postcard.christmas.index.jpg3578.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: uruhauz@xxx
Subject: Merry Christmas!
MessageID: DE88A1DD325
Report: ClamAV: link.postcard.php7144.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.php7144.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kawu@xxx
Subject: Re: Merry Christmas!
MessageID: B4D641DD325
Report: ClamAV: link.postcard.index.jpg7864.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: repa@xxx
Subject: Merry Christmas!
MessageID: 815AB1DD325
Report: ClamAV: postcard.christmas.jpg8281.zip contains Worm.Zafi.D

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: samiki@xxx
Subject: Re: Merry Christmas!
MessageID: 83AFB1DD325
Report: ClamAV: link.postcard.php8304.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ucojali@xxx
Subject: Re: Merry Christmas!
MessageID: 603E21DD325
Report: ClamAV: link.postcard.index.htm0756.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.htm0756.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ukefuv@xxx
Subject: Merry Christmas!
MessageID: A12B61DD325
Report: ClamAV: link.postcard.index.gif1004.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wate@xxx
Subject: Merry Christmas!
MessageID: 2A0B41DD325
Report: ClamAV: link.postcard.index.php6013.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.php6013.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vonasib@xxx
Subject: Fw: Merry Christmas!
MessageID: DE77F1DD325
Report: ClamAV: postcard.gif3527.bat contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.gif3527.bat)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: dakap@xxx
Subject: Merry Christmas!
MessageID: E7ACA1DD325
Report: ClamAV: link.postcard.htm8258.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kuki@xxx
Subject: Merry Christmas!
MessageID: BAB6A1DD325
Report: ClamAV: link.postcard.christmas.htm7351.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: duporit@xxx
Subject: Re: Merry Christmas!
MessageID: 15EB01DD325
Report: ClamAV: link.postcard.index.php6512.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.index.php6512.pif)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: seto@xxx
Subject: Re: Merry Christmas!
MessageID: 685EE1DD325
Report: ClamAV: postcard.christmas.index.jpg1433.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (postcard.christmas.index.jpg1433.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: desaju@xxx
Subject: Merry Christmas!
MessageID: 412341DD325
Report: ClamAV: link.postcard.christmas.index.php0760.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: ugib@xxx
Subject: Fw: Merry Christmas!
MessageID: 7114E1DD325
Report: ClamAV: link.postcard.htm7578.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: meru@xxx
Subject: Fw: Merry Christmas!
MessageID: 1D4381DD325
Report: ClamAV: postcard.christmas.htm6048.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wojiu@xxx
Subject: Merry Christmas!
MessageID: 3BD0A1DD325
Report: ClamAV: link.postcard.christmas.index.jpg7870.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: wuno@xxx
Subject: Merry Christmas!
MessageID: 4B9771DD325
Report: ClamAV: link.postcard.christmas.htm8547.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: giluuh@xxx
Subject: Re: Merry Christmas!
MessageID: 21A3D1DD325
Report: ClamAV: link.postcard.christmas.htm4221.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: iubumab@xxx
Subject: Merry Christmas!
MessageID: 4B2C91DD325
Report: ClamAV: link.postcard.index.htm4871.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: kecu@xxx
Subject: Merry Christmas!
MessageID: 9A8431DD325
Report: ClamAV: postcard.php0814.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: vemofad@xxx
Subject: Merry Christmas!
MessageID: 3237A1DD325
Report: ClamAV: link.postcard.gif2777.pif contains Worm.Zafi.D
MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (link.postcard.gif2777.pif)

Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: hofe@xxx
Subject: Merry Christmas!
MessageID: 556951DD325
Report: ClamAV: postcard.christmas.php7240.zip contains Worm.Zafi.D


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: suzo@xxx
Subject: Merry Christmas!
MessageID: E94891DD325
Report: ClamAV: link.postcard.index.jpg5745.cmd contains Worm.Zafi.D
MailScanner: Batch files are often malicious (link.postcard.index.jpg5745.cmd)


Sender: etv@comclark.com
IP Address: 203.87.163.142
Recipient: pelu@xxx
Subject: Re: Merry Christmas!
MessageID: 9F3DD1DD325
Report: ClamAV: link.postcard.index.php6766.zip contains Worm.Zafi.D


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Re: Hello
MessageID: A35531DD325
Report: ClamAV: Details.scr contains Worm.Bagle.Z
MailScanner: Windows Screensavers are often used to hide viruses (Details.scr)

Dec 30
Topic: Viruses
Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: Changes..
MessageID: 3D5831DD325
Report: ClamAV: MoreInfo.exe contains Worm.Bagle.Z
MailScanner: Executable DOS/Windows programs are dangerous in email (MoreInfo.exe)


Sender: ivylistic@yahoo.com
IP Address: 203.115.189.22
Recipient: amy@xxx
Subject: RE: Text message
MessageID: B78641DD325
Report: ClamAV: text_document.zip contains Worm.Bagle.Gen-zippwd