[Dshield] Klez question
jaikula at hotmail.com
Sat May 4 21:12:56 GMT 2002
Klez uses all sorts of attachments, it often sends txt and htm files along with the executable file.
----- Original Message -----
From: "Paul Marsh" <pmarsh at nmefdn.org>
To: "'Dshield (E-mail)" <list at dshield.org>
Sent: Saturday, May 04, 2002 12:33 AM
Subject: [Dshield] Klez question
I finally got around to installing Scanmail and configed it to strip .exe's,
.bat's, .pif's and .scr's. Today I noticed a Klez attachment that got
through because the files extension was appended with .txt so as far as
Scanmail was concerned the attachment was OK for delivery. Have I just been
sleeping or is this a new gig for Mr. Klez?
[[ Attachement of type text/html deleted]]
More information about the list