FW: [Esa-l]Anyone seen this one before?

[Floyd Pierce]

I'd suggest that, .bat and .lnk be added to the poisoned list
for those admins who have a tight policy (ie the e-mail nazi's)
as I have.... Don't know why I didn't have .bat in there before.


--
Floyd Pierce              | Director of Information Technology
Phone  847-790-2830 (IL)  | Box USA
Phone  817-783-2355 (TX)  | floydp at boxusa.com
Fax    847-790-2880       | floyd at floydbob.com




> -----Original Message-----
> From: esa-l-admin at spconnect.com [mailto:esa-l-admin at spconnect.com]On
> Behalf Of Peter Hanecak
> Sent: Monday, July 23, 2001 2:51 AM
> To: Email Security Announce list
> Subject: Re: [Esa-l]Anyone seen this one before?
> 
> 
> Hello,
> 
> On Sun, 22 Jul 2001, John D. Hardin wrote:
> 
> > Odd. I just tried to take a look at the two copies in my quarantine,
> > and in both cases PINE's base64 decoder said they were corrupt.
> 
> I tried to take a look at the "code" and I encountered same thing -
> corrupted base64 encoding.
> 
> Btw, we received 11 messages (all quarantined) in past 3 days from 5
> various sources, to 3 different recipients with 6 different subjects. All
> messages are quite big (from 0.25 to 1.5 MB). Attachments had various
> double extensions: .doc.com, .zip.bat, .doc.lnk, .doc.pif, .doc.bat,
> .xls.com .
> 
> Sincerely
> 
> Peter Hanecak
> 
> -- 
> ===================================================================
>   Peter Hanecak <hanecak at megaloman.com>
>   GPG pub.key: http://www.megaloman.com/gpg/hanecak-megaloman.txt
> ===================================================================
> _______________________________________________
> E-mail Security Announce list mailing list
> E-mail Security Announce list at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esa-l