Postini has been catching Win32.Netsky.P a lot at Visi. I'm a mindless drone when it comes to viruses so I just delete them. Sam. Quoting Josh Trutwin <josh at trutwins.homeip.net>: > I just got a message from my virus scanner that something sent to TCLUG-DEVEL > had a virus. Looked bogus as Spamassassin also tagged it as spam. > > Anyone else get this: > > Content preview: Antigen for Exchange found msg.zip->data.rtf .scr > infected with VIRUS= Win32.Netsky.P > (CA(Vet),Sophos,CA(InoculateIT),Norman) worm. The message is currently > Purged. The message, "Re: Failure", was sent from > tclug-devel at mn-linux.org and was discovered in IMC Queues\Inbound > located at YRDSB/Aurora/YRDSB5. [...] > > Content analysis details: (5.7 points, 5.0 required) > > pts rule name description > ---- ---------------------- > -------------------------------------------------- > 8.0 VIRUS_WARNING63 From header strongly indicates unhelpful 'virus > warning' (63) > 1.0 NO_RDNS2 Sending MTA has no reverse DNS > 0.6 J_CHICKENPOX_210 BODY: {2}Letter - punctuation - {10}Letter > 1.0 IMPRONONCABLE_1 BODY: Some words aren't easy to pronounce (too > much wovels) > -4.9 BAYES_00 BODY: Bayesian spam probability is 0 to 1% > [score: 0.0000] > Josh > > _______________________________________________ > TCLUG Mailing List - Minneapolis/St. Paul, Minnesota > http://www.mn-linux.org tclug-list at mn-linux.org > https://mailman.real-time.com/mailman/listinfo/tclug-list _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list