[Dshield] Klez question

Jaikula jaikula at hotmail.com
Sat May 4 21:12:56 GMT 2002


Klez uses all sorts of attachments, it often sends txt and htm files along with the executable file.

----- Original Message ----- 
From: "Paul Marsh" <pmarsh at nmefdn.org>
To: "'Dshield (E-mail)" <list at dshield.org>
Sent: Saturday, May 04, 2002 12:33 AM
Subject: [Dshield] Klez question


I finally got around to installing Scanmail and configed it to strip .exe's,
.bat's, .pif's and .scr's.  Today I noticed a Klez attachment that got
through because the files extension was appended with .txt so as far as
Scanmail was concerned the attachment was OK for delivery.  Have I just been
sleeping or is this a new gig for Mr. Klez?

TIA, Paul


[[ Attachement of type text/html deleted]]





More information about the list mailing list