Bug#269306: File blocked - ScanMail for Lotus Notes --> Stolen document

Tue, 26 Apr 2005 03:05:53 -0400

ATTENTION: To protect users from new worms the attachment in the email
that you supposedly sent (see below)  was replaced with a dummy file. The
email itself was delivered to the recipient.
IF YOU DID NOT SEND THIS EMAIL  JUST DELETE THIS NOTIFICATION
Most probably, your address was found by the worm  on an infected computer
and one of the generated by this worm letters contains your address in the
"from" field.
If you did send the letter in question, please be aware that three major
classes of attachments are now blocked for security reasons:
1. ZIP attachments with the name less then eight characters.
2. Predefined set of attachment names that current worms use for
propagation.  BASF users should consult
iwww.basf-corp.com/NTI_computersecurity/AV/sender_notice.shtml  for the
most recent version of the list.
3. Executable attachments with the extensions:

Date: 04/26/2005 03:05:53 AM
Subject:  Stolen document
Virus:
File: document342.txt
.pif
From: 269306@bugs.debian.org
To:   oppanol@basf-corp.com
Action:     Blocked by Filter Rules;

Scanned by ScanMail for Lotus Notes 2.6 SP1
with scanengine 7.510-1002
and pattern version 2.598.00