FW: Email Issues

From: Duffy H (duffyh_at_hotmail.com)
Date: 02/27/04

  • Next message: geraldf_at_westernsaw.com: "Re: disallow freemail"
    To: security-basics@securityfocus.com
    Date: Thu, 26 Feb 2004 16:48:38 -0800
    
    

    Just got off the phone with Symantec.
    They said, they do not stop or block *.zip's when they pose no threat if you
    take a look at the details.zip at least the one I'm getting has nothing in
    it,
    as in 0b it shows in the email 64b or 78 b in your case but that is simply
    for the icon and whatever else.
    Scan it then open it and see for yourself what is inside it.

    My question is why is somebody testing this?

    -----Original Message-----
    From: Derek Odiorne [mailto:dodiorne@newmarcorp.com]
    Sent: Thursday, February 26, 2004 11:10 AM
    To: security-basics@securityfocus.com
    Subject: RE: Email Issues

      I am experiencing the same thing. Upon opening the zip file there is
    no files in it.

    -----Original Message-----
    From: sean.osullivan@ise.ie [mailto:sean.osullivan@ise.ie]
    Sent: Thursday, February 26, 2004 4:51 AM
    To: security-basics@securityfocus.com
    Subject: Email Issues

    Hi All

    Something weird has been happening the last three days. We have been
    getting mails that look like the NetSky virus (smae text and
    attachments), to a certain mailboxs, but the weird thing is that the
    .zip attachment is 78 Bytes, the actual virus .zip file is 22,016 bytes.
    Another things is our Mailsweeper is set to block all .zip files but
    this one is getting through. I did a test and sent a mail with a normal
    .zip attachment to this mail box and it got blocked. Has anyone seen
    this or have any ideas on what its all about?

    Thanks in advance.

    Sean

    **********************************************************************
    This footnote also confirms that this email message has been swept by
    MIMEsweeper for the presence of computer viruses.

    www.mimesweeper.com
    **********************************************************************

    ------------------------------------------------------------------------

    ---
    ------------------------------------------------------------------------
    ----
    -----------------------------------------------------------------------
    This communication (including any attachments) is intended only for the 
    person or entity to which it is addressed and may contain confidential 
    and/or privileged information.  If you
    are not the intended recipient, any retransmission, dissemination, 
    distribution, disclosing, copying, or using any of this information is 
    strictly prohibited.  If you received this communication in error, please 
    contact the sender immediately and delete or destroy the
    material in its entirety.
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    _________________________________________________________________
    Dream of owning a home? Find out how in the First-time Home Buying Guide. 
    http://special.msn.com/home/firsthome.armx
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    

  • Next message: geraldf_at_westernsaw.com: "Re: disallow freemail"

    Relevant Pages

    • RE: Sendmail & Active Directory
      ... > Red Hat Certified Technician/Engineer ... > privileged information. ... If you are not the intended recipient, ... > immediately and permanently delete this message and any attachments. ...
      (RedHat)
    • cpuid?
      ... Windows Systems Engineer ... privileged information. ... If you are not the intended recipient, ... and permanently delete this message and any attachments. ...
      (RedHat)
    • CPU + Memory info
      ... Windows Systems Engineer ... privileged information. ... If you are not the intended recipient, ... and permanently delete this message and any attachments. ...
      (RedHat)
    • SSH failed login.
      ... Southern Wine & Spirits - GSD ... privileged information. ... If you are not the intended recipient, ... and permanently delete this message and any attachments. ...
      (RedHat)
    • Red Carpet?
      ... Southern Wine & Spirits - GSD ... solely for the intended recipient and may contain confidential or privileged information. ... If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. ...
      (RedHat)