Re: [PLUG] WARNING!!!

[Stewart B Lone <592653589793238@snip.net>]

Walt Mankowski wrote:
> On Sun, Jan 25, 2004 at 01:07:53PM -0500, Edmond Kerollis wrote:
>
> > Dear PLUG friends,
> > When I opened my email client today I got this message from my AVG antivirus:
> >      I-Worm/Bagle virus found in attachment
> > Sender: waltman@pobox.com
> > Subject:[PLUG] Hi
> > Infected file will be moved into the Virus Vault
> > Infected attachment will be overwritten with information about AVG intervention.
>
>
> Interesting.  I hadn't noticed that that message claimed to be from
> me.  Of course this virus, and many like it, fake the sender address.
> I handle email on my Linux box using mutt, so there's no way I could
> have been infected by Bagle.  Real messages from me to this list will
> always be signed by my GPG signature.
>
> Walt
Hello Walt, I also got a message from my ISP today. The particulars are 
below if it helps:-
------------------------------------------------------------------------
This is the mail anti-virus program at virusgate1.snip.net.

We BLOCKED a message addressed to you from:
plug-admin@lists.phillylinux.org

containing:
infected: I-Worm.Bagle

This message does not contain the virus or the original e-mail message.

This message is just a notification and can be safely deleted.

The person sending this virus received a notification as well.

The attached file contains the message headers of the infected mail.
The headers will only be of interest to a mail administrator.

Do not reply to this auto-generated message. All replies to
this message will be lost.

Please direct any comments or questions to tech-rcpt@snip.net.

Thank you,

SNiP Internet and Telecommunications



Received: from imgate2.snip.net (imgate2.snip.net [209.204.64.8])
	by virusgate1.snip.net (Postfix) with ESMTP id 3293255403
	for <592653589793238@snip.net>; Sun, 25 Jan 2004 05:19:21 -0500 (EST)
Received: from mail.netisland.net (ellesmere.netisland.net 
[209.163.107.162])
	by imgate2.snip.net (Postfix) with SMTP id 7710C60E50
	for <592653589793238@snip.net>; Sun, 25 Jan 2004 05:19:24 -0500 (EST)
Received: (qmail 30868 invoked from network); 25 Jan 2004 10:19:02 -0000
Received: from unknown (HELO ellesmere.netisland.net) (127.0.0.1)
  by localhost with SMTP; 25 Jan 2004 10:19:02 -0000
Delivered-To: plug@netisland.net
Received: (qmail 30807 invoked by alias); 25 Jan 2004 10:18:11 -0000
Delivered-To: alias-plug@phillylinux.org
Delivered-To: alias-plug@phillylinux.org
Received: (qmail 30800 invoked by alias); 25 Jan 2004 10:18:10 -0000
Delivered-To: alias-plug@lists.phillylinux.org
Delivered-To: alias-plug@lists.phillylinux.org
Received: (qmail 30789 invoked from network); 25 Jan 2004 10:17:59 -0000
Received: from unknown (HELO celeron) (202.168.127.60)
  by mail.netisland.net with SMTP; 25 Jan 2004 10:17:59 -0000
Date: Sun, 25 Jan 2004 21:17:50 +1000
To: plug@lists.phillylinux.org
From: waltman@pobox.com
Message-ID: <vnwismhwxnixjejdmpk@pobox.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="--------003687778602232"
Subject: [PLUG] Hi
Sender: plug-admin@lists.phillylinux.org
Errors-To: plug-admin@lists.phillylinux.org
X-BeenThere: plug@lists.phillylinux.org
X-Mailman-Version: 2.0.11
Precedence: bulk
Reply-To: plug@lists.phillylinux.org
List-Help: <mailto:plug-request@lists.phillylinux.org?subject=help>
List-Post: <mailto:plug@lists.phillylinux.org>
List-Subscribe: <http://lists.netisland.net/mailman/listinfo/plug>,
	<mailto:plug-request@lists.phillylinux.org?subject=subscribe>
List-Id: Philadelphia Linux User's Group Discussion List 
<plug.lists.phillylinux.org>
List-Unsubscribe: <http://lists.netisland.net/mailman/listinfo/plug>,
	<mailto:plug-request@lists.phillylinux.org?subject=unsubscribe>




___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug