[DB-SIG] File blocked - ScanMail for Lotus Notes --> MAIL TRANSACTION FAILED

Antivirus at basf-corp.com Antivirus at basf-corp.com
Wed Feb 25 20:48:54 EST 2004


ATTENTION:
.
Due to the virus threat, an "executable" attachment, double extension
attachment or ZIP attachment that you (supposedly ) sent was replaced with
a dummy file.
IF YOU DID NOT SEND THIS LETTER JUST DELETE THIS MAIL: WORM SPOOFED YOUR
ADDRESS.
.
Three major classes of attachments are now blocked for security reasons:
.
1. ZIP ATTACHMENTS WITH THE NAME LESS THEN EIGHT CHARACTERS
Most of such attachments are generated by Mimail worm and its derivatives
(MyDoom, Netsky, etc). For example attachments such as message.zip,
photos.zip, wendy.zip would be blocked for this reason (and those examples
represent names that are actually generated by those worms). If your sender
send you a ZIP attachment with such a short name (eight characters or less)
please ask him/her to rename it and sent it again.
.
2. ATTACHMENTS WITH DOUBLE EXTENSIONS LIKE FILE.DOC.ZIP OR DATA.04.XLS
.
3. EXECUTABLE ATTACHMENTS
- BASF users: iwww.basf-corp.com/NTI_ComputerSecurity/av.shtml
- Non-BASF users: www.antivirus.com
.
.
.


Date: 02/25/2004 08:48:54 PM
Subject:  MAIL TRANSACTION FAILED
Virus:
File: doc.zip
From: db-sig at python.org
To:   steve at basf-corp.com
Action:     Blocked by Filter Rules;

Scanned by ScanMail for Lotus Notes 2.6
with scanengine 6.510-1002
and patternfile lpt$vpn.769





More information about the DB-SIG mailing list