19:51:22.91 (LOG:001) Log file opened on 29-Mar-2004 19:51:22.91 (GMA:001) Message located in post office "SMTP". 19:51:22.91 (GMA:001) Message located in Group "PostOffices". 19:51:22.91 (MSW:001) Created by MAILsweeper Version 3.2_5 19:51:22.91 (MSW:001) Reading message from post office "SMTP" 19:51:22.91 (MSW:002) Contents of "Received message" 19:51:22.91 (MSW:002) Address List 19:51:22.92 (MSW:002) From = "address@hidden" 19:51:22.92 (MSW:002) BCC = "address@hidden" 19:51:22.92 (MSW:002) Headers 19:51:22.92 (MSW:002) RCPMESSAGEID = " " 19:51:22.92 (MSW:002) RECEIVED = " from eugate01.e-mail.com (unverified) by cwtesc02.cwt.de" 19:51:22.92 (MSW:002) " (Content Technologies SMTPRS 2.0.15) with ESMTP id for ;" 19:51:22.92 (MSW:002) " Mo, 29 Mrz 2004 19:51:18 +0200" 19:51:22.92 (MSW:002) MESSAGEID = " " 19:51:22.92 (MSW:002) RECEIVED = " from cwt.de (unknown[62.48.170.181])" 19:51:22.92 (MSW:002) " by eugate.e-mail.com (smtpgw1) with SMTP" 19:51:22.92 (MSW:002) " id <20040329174226230053j2h0e>; Mon, 29 Mar 2004 17:42:27 +0000" 19:51:22.92 (MSW:002) FROM = " address@hidden" 19:51:22.92 (MSW:002) TO = " address@hidden" 19:51:22.92 (MSW:002) SUBJECT = " Delivery Failure (address@hidden)" 19:51:22.92 (MSW:002) SENTDATE = " Mon, 29 Mar 2004 18:47:03 +0100" 19:51:22.92 (MSW:002) Mime-Version = " 1.0" 19:51:22.92 (MSW:002) Content-Type = " multipart/mixed;" 19:51:22.92 (MSW:002) " boundary="----=_NextPart_000_0016----=_NextPart_000_0016"" 19:51:22.92 (MSW:002) X_HEADER::X-Priority = " 1" 19:51:22.92 (MSW:002) X_HEADER::X-MSMail-Priority = " High" 19:51:22.92 (MSW:002) PREAMBLE = "This is a multi-part message in MIME format." 19:51:22.92 (MSW:002) "" 19:51:22.92 (MSW:002) POSTAMBLE = "" 19:51:22.92 (MSW:002) "" 19:51:22.92 (MSW:002) Attributes 19:51:22.92 (MSW:002) Return-Path = "address@hidden" 19:51:22.92 (MSW:002) Recipient = "address@hidden" 19:51:22.92 (MSW:002) UniqueId = "" 19:51:22.93 (MSW:002) From = "address@hidden" 19:51:22.93 (MSW:002) To = "address@hidden" 19:51:22.93 (MSW:002) Subject = "Delivery Failure (address@hidden)" 19:51:22.93 (MSW:002) SentDate = "Mon, 29 Mar 2004 18:47:03 +0100" 19:51:22.93 (MSW:002) Bcc = "address@hidden" 19:51:22.93 (MSW:002) NumAttachments = 1 19:51:22.93 (MSW:002) MessageSize = 38977 19:51:22.93 (MSW:002) SourcePostOffice = "SMTP" 19:51:22.93 (GMA:002) Attribute for Attachment 0 19:51:22.93 (GMA:002) Attribute 'HasHeaders' = 'TRUE' 19:51:22.93 (GMA:002) Attribute 'MailSystemType' = 'SMTP' 19:51:22.93 (GMA:002) Attribute 'AttachmentSize' = 38550 19:51:22.93 (GMA:002) Attribute 'ContentTitle' = 'message0898.zip' 19:51:22.93 (GMA:002) Attribute 'AttachmentName' = 'message0898.zip' 19:51:22.93 (GMA:002) Attribute 'AttachmentNameLength' = 15 19:51:22.93 (GMA:002) Attribute 'ContainerClass' = 'Container' 19:51:22.93 (MSW:002) Starting container analysis phase 19:51:22.93 (AMU:002) Matched response "allow_in". 19:51:22.93 (AMU:002) AMU response is 'allow'. 19:51:22.94 (MSW:001) Node '0' Recognised by MIM 19:51:22.94 (MSW:001) Validating Node '0' - 'MIME_Text' '' 19:51:22.94 (MSW:002) Attribute 'HasHeaders' = 'TRUE' 19:51:22.94 (MSW:002) Attribute 'MailSystemType' = 'SMTP' 19:51:22.94 (MSW:002) Attribute 'AttachmentSize' = 427 19:51:22.94 (MSW:002) Attribute 'ContentTitle' = '' 19:51:22.94 (MSW:002) Attribute 'ContainerClass' = 'Container' 19:51:22.94 (MSW:002) Attribute 'NodeId' = '0' 19:51:22.94 (MSW:002) Attribute 'ContainerName' = 'MIME_Text' 19:51:22.95 (MSW:001) Node '0.0' Recognised by Binary 19:51:22.95 (MSW:001) Validating Node '0.0' - 'Binary' '' 19:51:22.95 (MSW:002) Attribute 'AttachmentSize' = 340 19:51:22.95 (MSW:002) Attribute 'NodeId' = '0.0' 19:51:22.95 (MSW:002) Attribute 'ContainerClass' = 'Binary' 19:51:22.95 (MSW:002) Attribute 'ContainerName' = 'Binary' 19:51:22.95 (MSW:001) Validating Node '0.0' - 'Binary' '' 19:51:22.95 (MSW:002) Attribute 'AttachmentSize' = 340 19:51:22.95 (MSW:002) Attribute 'NodeId' = '0.0' 19:51:22.95 (MSW:002) Attribute 'ContainerClass' = 'Binary' 19:51:22.95 (MSW:002) Attribute 'ContainerName' = 'Binary' 19:51:22.95 (VAL:002) HBEDV - PerformIf matched ContainerClass=="Binary". 19:51:22.97 (MSW:002) Validator 'HBEDV' returned "SUCCESS" 19:51:22.97 (MSW:001) Validating Node '0' - 'MIME_Text' '' 19:51:22.97 (MSW:002) Attribute 'HasHeaders' = 'TRUE' 19:51:22.97 (MSW:002) Attribute 'MailSystemType' = 'SMTP' 19:51:22.97 (MSW:002) Attribute 'AttachmentSize' = 427 19:51:22.97 (MSW:002) Attribute 'ContentTitle' = '' 19:51:22.97 (MSW:002) Attribute 'ContainerClass' = 'Container' 19:51:22.97 (MSW:002) Attribute 'NodeId' = '0' 19:51:22.97 (MSW:002) Attribute 'ContainerName' = 'MIME_Text' 19:51:22.99 (MSW:001) Node '1' Recognised by MIM 19:51:22.99 (MSW:001) Validating Node '1' - 'MIME_Application' 'message0898.zip' 19:51:22.99 (MSW:002) Attribute 'HasHeaders' = 'TRUE' 19:51:22.99 (MSW:002) Attribute 'MailSystemType' = 'SMTP' 19:51:22.99 (MSW:002) Attribute 'AttachmentSize' = 38550 19:51:22.99 (MSW:002) Attribute 'ContentTitle' = 'message0898.zip' 19:51:22.99 (MSW:002) Attribute 'AttachmentName' = 'message0898.zip' 19:51:22.99 (MSW:002) Attribute 'AttachmentNameLength' = 15 19:51:22.99 (MSW:002) Attribute 'ContainerClass' = 'Container' 19:51:22.99 (MSW:002) Attribute 'NodeId' = '1' 19:51:22.99 (MSW:002) Attribute 'ContainerName' = 'MIME_Application' 19:51:23.02 (MSW:001) Node '1.0' Recognised by EXE 19:51:23.02 (MSW:001) Validating Node '1.0' - 'Win32Exe' '' 19:51:23.02 (MSW:002) Attribute 'AttachmentSize' = 28008 19:51:23.02 (MSW:002) Attribute 'AttachmentName' = 'message0898.zip' 19:51:23.02 (MSW:002) Attribute 'AttachmentNameLength' = 15 19:51:23.02 (MSW:002) Attribute 'NodeId' = '1.0' 19:51:23.02 (MSW:002) Attribute 'ContainerClass' = 'Executable' 19:51:23.02 (MSW:002) Attribute 'ContainerName' = 'Win32Exe' 19:51:23.02 (MSW:001) Validating Node '1.0' - 'Win32Exe' '' 19:51:23.02 (MSW:002) Attribute 'AttachmentSize' = 28008 19:51:23.02 (MSW:002) Attribute 'AttachmentName' = 'message0898.zip' 19:51:23.02 (MSW:002) Attribute 'AttachmentNameLength' = 15 19:51:23.02 (MSW:002) Attribute 'NodeId' = '1.0' 19:51:23.02 (MSW:002) Attribute 'ContainerClass' = 'Executable' 19:51:23.02 (MSW:002) Attribute 'ContainerName' = 'Win32Exe' 19:51:23.02 (VAL:002) HBEDV - PerformIf matched ContainerClass=="Executable". 19:51:23.05 (MSW:002) Validator 'HBEDV' returned "VIRUSPRESENT" 19:51:23.05 (VAL:002) Result 'HaveExecutable' Because attribute 'ContainerClass' = 'Executable' 19:51:23.05 (MSW:002) Validator 'DetectExecutable' returned "HaveExecutable" 19:51:23.05 (MSW:002) Validator 'HTML' returned "HaveExecutable" 19:51:23.05 (MSW:001) Validating Node '1' - 'MIME_Application' 'message0898.zip' 19:51:23.05 (MSW:002) Attribute 'HasHeaders' = 'TRUE' 19:51:23.05 (MSW:002) Attribute 'MailSystemType' = 'SMTP' 19:51:23.06 (MSW:002) Attribute 'AttachmentSize' = 38550 19:51:23.06 (MSW:002) Attribute 'ContentTitle' = 'message0898.zip' 19:51:23.06 (MSW:002) Attribute 'AttachmentName' = 'message0898.zip' 19:51:23.06 (MSW:002) Attribute 'AttachmentNameLength' = 15 19:51:23.06 (MSW:002) Attribute 'ContainerClass' = 'Container' 19:51:23.06 (MSW:002) Attribute 'NodeId' = '1' 19:51:23.06 (MSW:002) Attribute 'ContainerName' = 'MIME_Application' 19:51:23.06 (MSW:001) Following disposal route "Virus". 19:51:23.06 (MSW:002) Quarantine disposal 19:51:23.98 (MSW:001) Message quarantined in "Blocked Messages" as entry "A0029208". 19:51:23.98 (MSW:002) Quarantine disposal end 19:51:23.98 (MSW:002) Inform disposal "VirusList"