http://weblogs.asp.net/mhawley/archive/2004/01/26/63165.aspxWhy is it a scary day? Well, I just got an email with an attachment. So? Whats your point...well a few things: 1. The email was from someone I didn't know, no biggie I get these all the time for support. 2. No subject. Well, this isn't always a problemenCommunityServer 2007 SP1 (Build: 20510.895)http://weblogs.asp.net/mhawley/archive/2004/01/26/63165.aspx#63384Tue, 27 Jan 2004 16:20:00 GMTc06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:63384Matt HawleyMatt HawleyTrue, most virus scanners do scan zip files, however, when the files contained are not infected themselves, they can continue on. In this instance, the file in the zip file was the virus executable, and was not infected with it.<img src="http://weblogs.asp.net/aggbug.aspx?PostID=63384" width="1" height="1">http://weblogs.asp.net/mhawley/archive/2004/01/26/63165.aspx#63339Tue, 27 Jan 2004 12:06:00 GMTc06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:63339tt15 + mails of these for me just today. <br>Eventual ruling - block all emails with zip files. <br><img src="http://weblogs.asp.net/aggbug.aspx?PostID=63339" width="1" height="1">http://weblogs.asp.net/mhawley/archive/2004/01/26/63165.aspx#63326Tue, 27 Jan 2004 12:05:00 GMTc06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:63326TrackBackTrackBack<img src="http://weblogs.asp.net/aggbug.aspx?PostID=63326" width="1" height="1">http://weblogs.asp.net/mhawley/archive/2004/01/26/63165.aspx#63234Tue, 27 Jan 2004 03:59:00 GMTc06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:63234anonanonmany server based virus scanners can handle zip files e.g. symantec. You often have to install the zip software, so it can understand the archives, but AFAIR, pk204g.exe will work fine, otherwise download winzip. <img src="http://weblogs.asp.net/aggbug.aspx?PostID=63234" width="1" height="1">http://weblogs.asp.net/mhawley/archive/2004/01/26/63165.aspx#63202Tue, 27 Jan 2004 01:56:00 GMTc06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:63202TravisTravisI got one of these today... it contained a binary .exe renamed to 'message.exe'. Dont know what the payload was, it was deleted right away. <br> <br>Travis<img src="http://weblogs.asp.net/aggbug.aspx?PostID=63202" width="1" height="1">