FW: [Esa-l]Anyone seen this one before?
floydp at boxusa.com
Mon Jul 23 05:57:30 PDT 2001
I'd suggest that, .bat and .lnk be added to the poisoned list
for those admins who have a tight policy (ie the e-mail nazi's)
as I have.... Don't know why I didn't have .bat in there before.
Floyd Pierce | Director of Information Technology
Phone 847-790-2830 (IL) | Box USA
Phone 817-783-2355 (TX) | floydp at boxusa.com
Fax 847-790-2880 | floyd at floydbob.com
> -----Original Message-----
> From: esa-l-admin at spconnect.com [mailto:esa-l-admin at spconnect.com]On
> Behalf Of Peter Hanecak
> Sent: Monday, July 23, 2001 2:51 AM
> To: Email Security Announce list
> Subject: Re: [Esa-l]Anyone seen this one before?
> On Sun, 22 Jul 2001, John D. Hardin wrote:
> > Odd. I just tried to take a look at the two copies in my quarantine,
> > and in both cases PINE's base64 decoder said they were corrupt.
> I tried to take a look at the "code" and I encountered same thing -
> corrupted base64 encoding.
> Btw, we received 11 messages (all quarantined) in past 3 days from 5
> various sources, to 3 different recipients with 6 different subjects. All
> messages are quite big (from 0.25 to 1.5 MB). Attachments had various
> double extensions: .doc.com, .zip.bat, .doc.lnk, .doc.pif, .doc.bat,
> .xls.com .
> Peter Hanecak
> Peter Hanecak <hanecak at megaloman.com>
> GPG pub.key: http://www.megaloman.com/gpg/hanecak-megaloman.txt
> E-mail Security Announce list mailing list
> E-mail Security Announce list at spconnect.com
More information about the esd-l