Just want to relay my experience: yesterday night I received this email message:
X-Persona:
Return-Path:
Received: from hg.com (201-255-77-219.mrse.com.ar [201.255.77.219] (may be forged))
by bofh.lv (8.13.8/8.12.9) with ESMTP id kARJNZZg014850
for ; Mon, 27 Nov 2006 21:24:07 +0200
Date: Mon, 27 Nov 2006 16:24:19 -0300
From:
[email protected]
X-Mailer: vixhwlxe
Reply-To:
[email protected]
X-Priority: 3 (Normal)
Message-ID:
[email protected]
To:
Subject: Protected Mail Service
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="183B148B"
X-UIDL: bK8"!%h3"!/n!#!*R!!!
====================
You have received Protected E-mail
To read the message open attached file.
User ID: 20770
Password: 698c1bed
Keep your password in a safe place.
Sincerely,
Protected Mail Service,
AOL.com
_________
http://hllhl.12gbl.com.ua - New Trading System!
message.zip
My Kaspersky 6.0 didn't see anything wrong with attached file, though I set it to especially scan it (I didn't attempt to unzip it, of course- but Kaspersky normally finds bad guys also in compressed files of all formats), instead I Skyped the message and the file to the local Kaspersky representative. He replied he will immediately send it to the KAV headquarters.
And behold- about 3 hours later, with fresh antivirus updates (Kaspersky updates are by default automatic every hour) my Kaspersky did find virus (Trojan Downloader) in the said zip file and deleted it.
I was impressed and surely will stick with KAV
Uldis
P.S. On the second thought, I just changed that weblink in the quoted message, as I'm not sure if clicking on it as it was in original is safe.
[Rediģēts plkst. 2006-11-28 23:30]