[Mimedefang] New MIME tricks from Klez?

Tim Kramer kramer.tim at cox.net
Tue Aug 6 20:00:01 EDT 2002


I've been seeing the multiple attachments and double infection
for quite awhile now (weeks at least).  It's nothing new.

I've also been quarantining the entire message, auto-deleting 
after 5 days, and sending a custom message to the recipient 
and sender.  Only problem I'm having is that a lot of the 
Klez "From" lines are forged by the virus.  (I keep having to
explain to people that it might not be their machine that's
actually infected.)

- Tim






More information about the MIMEDefang mailing list