ALERT: Message from best-forestry was cleaned; File truelovers.scr infectedwith W32/Yaha.g@MM (aka Win32/Yaha.E.Worm, Win32.Yaha.E) virus

[fire-smtp04.fire.fordham.edu/FIRE%FIRE@fordham.edu]

Please refer to the Antigen Quarantine Area for more details.

 INCIDENT
------------------------------------------------------------------------------------------------------------------------

 Scan Time:       01/05/2003 09:30:17 PM
 Detection:       File truelovers.scr infected with W32/Yaha.g@MM (aka
Win32/Yaha.E.Worm, Win32.Yaha.E) virus
 Disposition:     Note has been cleaned
 Quarantined:     (Document link: Quarantine Area document)
CN=fire-smtp04.fire.fordham.edu/O=FIRE!!D:\Lotus\Domino\Data\A6QArea.NSF
 Version:         Antigen 6.0 SR3 (Build 607)


 MESSAGE
------------------------------------------------------------------------------------------------------------------------

 Message ID:      000DC1BD
 Sender:          best-forestry<best-forestry@ths.kth.se>
 Subject:         Fw: Wonderfool stuff to ur friends !!
 Recipients:      halsall@fordham.edu
 Routing:


 SYNOPSIS
------------------------------------------------------------------------------------------------------------------------

HTML Message Body
(strikethrough: (superscript:    << Normal >>))
      Status:       OK

FILE ATTACHMENT 'truelovers.scr'
      << W32/Yaha.g@MM (aka Win32/Yaha.E.Worm, Win32.Yaha.E) >>
      File size:    27666 bytes
      Host type:    STREAM
      Content type:              Exe.Win32
      Compression:  OFF
      Attributes:   PUBLIC READ-WRITE
      File flags:   2
      Created:      01/05/2003 09:30:15 PM
      Modified:     01/05/2003 09:30:15 PM
      Status:       Displaced
      << truelovers.scr >>
      Scanner:      NAI 4.1.60 [4.2.40] W32/Yaha.g@MM
      Scanner:      CA(InoculateIT) 23.59.1 [23.59.10] Win32/Yaha.E.Worm
      Scanner:      CA(Vet) 10.55.1 [10.55.4332] Win32.Yaha.E