[Mimedefang] zlb extension of bogus NDRs.
Jeffrey Goldberg
jeffrey at goldmark.org
Sat May 24 22:31:01 EDT 2003
On Sat, 24 May 2003, John Mason Jr. wrote:
> Norton went crazy on this message
>
> Date: 5/24/2003, Time: 15:17:48, John Mason on MASONJ
> The email attachment Unknown00000000.data within Unknown00000000.data
> within Unknown00000000.data is infected with the Downloader.BO.B.dr
> virus.
> Unable to delete the file.
I guess I quoted to much of the offensive material.
On another list I've seen reports of a virus that fakes an NDR saying
"your message could not be delivered. Read attachment for details." The
NDR really looks convincing. The attachment is something with the
extension .zlb and has very dangerous looking scripting in it.
Appearently it is the quoted material from the script that Norton AV went
crazy about, but since it wasn't in any form of attachment in my posting
of it to the list, there wasn't something coherent to delete.
-j
--
Jeffrey Goldberg http://www.goldmark.org/jeff/
Relativism is the triumph of authority over truth, convention over justice
Hate spam? Boycott MCI! http://www.goldmark.org/jeff/anti-spam/mci/
More information about the MIMEDefang
mailing list