topic Re: The virus checker seems to be working in Plusnet Feedback

The virus checker seems to be working

Oldjim — Mon, 30 Mar 2015 21:14:52 GMT

Notification received

Quote
Dear Plusnet Customer,
You are receiving this mail because you have an active virus-scanning service, and either a banned file extension or an email containing a virus has been sent to your address.
The mail was sent to you from:
* Mark Kemsley <mark.kemsley@energy-solutions.co.uk>
The subject line of the mail received was:
* [-SPAM-] Quotation cKuVxXX
In order to protect you, this email has been stored on our servers and quarantined. If you wish to retrieve this, please send an email to unquarantine@quarantine.plus.com containing the following information;

http://myonlinesecurity.co.uk/mark-kemsley-quotation-qzvnvm-fake-pdf-malware/

Re: The virus checker seems to be working

picbits — Tue, 31 Mar 2015 08:07:11 GMT

These have been bouncing off my own email server :

Mar 30 17:57:02 pbhpx postfix/qmgr[4048]: C9AC18023D: from=<mark.kemsley@energy-solutions.co.uk>, size=17694, nrcpt=1 (queue active)
Mar 30 17:57:28 pbhpx amavis[6489]: (06489-02) Blocked BANNED (.exe,Quotation.exe), [69.178.161.58] [69.178.161.58] <mark.kemsley@energy-solutions.co.uk> -> <sales@co.uk>, Message-ID: <55197254.105E1296@co.uk>, mail_id: ljaPwOQNbzWs, Hits: -, size: 17694, 26307 ms

Re: The virus checker seems to be working

KatC — Tue, 31 Mar 2015 10:36:37 GMT

If you need any help, give us a shout and we can have a look into it for you

Re: The virus checker seems to be working

Oldjim — Tue, 31 Mar 2015 14:53:43 GMT

Two more dodgy ones received today - one caught and one not both with zip files containing a Windows Executable
I suspect that the old data leak (circa 2007) has come back to haunt us
Not caught

Quote
Dear Mrs.
Please find attached a communication in respect of policy gszzcJcO from
Aomame. Please do not reply to this email, as the mailbox is unattended
Kind regards
Your Aomame Insurance Team

One caught

Quote
The mail was sent to you from:
* info <info@collectplus.co.uk>
The subject line of the mail received was:
* [-SPAM-] CollectPlus :: Your returns label

Re: The virus checker seems to be working

plusnettony — Tue, 31 Mar 2015 15:01:53 GMT

Can you please PM me the headers of the virus that got through? Cheers

Re: The virus checker seems to be working

Townman — Tue, 31 Mar 2015 15:08:10 GMT

Tony,
For info, please also see http://community.plus.net/forum/index.php/topic,138168.0.html

Re: The virus checker seems to be working

Oldjim — Tue, 31 Mar 2015 16:57:11 GMT

For information
This is what Kaspersky thinks of it - the file which arrived in the zip