[Mimedefang] zlb extension of bogus NDRs.

[Jeffrey Goldberg]

On Sat, 24 May 2003, John Mason Jr. wrote:

> Norton went crazy on this  message
>
> Date: 5/24/2003, Time: 15:17:48, John Mason on MASONJ
> The email attachment Unknown00000000.data within Unknown00000000.data
> within Unknown00000000.data is infected with the Downloader.BO.B.dr
> virus.
> Unable to delete the file.

I guess I quoted to much of the offensive material.

On another list I've seen reports of a virus that fakes an NDR saying
"your message could not be delivered.  Read attachment for details."  The
NDR really looks convincing.  The attachment is something with the
extension .zlb and has very dangerous looking scripting in it.

Appearently it is the quoted material from the script that Norton AV went
crazy about, but since it wasn't in any form of attachment in my posting
of it to the list, there wasn't something coherent to delete.

-j

-- 
Jeffrey Goldberg                            http://www.goldmark.org/jeff/
 Relativism is the triumph of authority over truth, convention over justice
 Hate spam?  Boycott MCI! http://www.goldmark.org/jeff/anti-spam/mci/