Eine Mail, die eine Virus Alarm auslöste

From: Zinn, Helmut <"Zinn,>
Date: Wed, 22 May 2002 11:17:56 +0200

----boundary-LibPST-iamunique-1280092460_-_-
Content-type: text/plain

Hallo

heute morgen habe ich von Euch folgende Mail bekommen, die bei uns einen
Virus Alarm auslöste:

-----
Betreff: TABINDEX

Virus gefunden in der Mail von blackbox-request{([at]})nowhere.xy
Helmut.Zinn{([at]})nowhere.xy
 am Tue, 21 May 2002 22:44:56 +0000 (UTC). Der Virus konnte nicht beseitigt
werden aus folgendem Grund:

Scenarios/Incoming/Sophos-AV: A virus has been detected: 'W32/Klez-G'.
Scenarios/Incoming/Block Exe: 'ItemLength.GE.0'.

Die Mail ist auf dem Virenscanner zwischen gespeichert, bitte beim
Administrator
melden.
-----

Unser Firewall-Administrator sagt es sei eine Mail ohne Text, die nur den
Virus beinhaltet. Mehr war nicht zu erfahren. Ist das ein Fehlalarm oder hat
es Ihr System erwischt?

Viele Grüße

Helmut Zinn
--------------------------------------------

To unsubscribe from this mailing list, send a message containing the word "unsubscribe" to:
   blackbox-request{([at]})nowhere.xy

To get a list of valid e-mail commands and instructions on their usage, send a message containing the word "help" to the above address.

Send any problem reports or questions related to this email list to the list owner at
   owner-blackbox{([at]})nowhere.xy

Current posting policy:

a) To post you should use the same address by which you are subscribed to the mailing list. That way, the list server will recognize you as subscriber and forward your posting immediately, without creating any overhead.

b) If, for some reason, you cannot post from the address, by which you are subscribed, your message will be moderated to avoid spam. Please understand that moderation will often cause some delay, in particular over weekends or holydays.


----boundary-LibPST-iamunique-1280092460_-_-
Content-type: application/rtf
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="rtf-body.rtf"
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----boundary-LibPST-iamunique-1280092460_-_---
Received on Wed May 22 2002 - 11:17:56 UTC