kaze on 25 Jan 2004 21:11:02 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

RE: [PLUG] WARNING!!!


--> [mailto:plug-admin@lists.phillylinux.org]On Behalf Of Stewart B Lone
--> Sent: Sunday, January 25, 2004 2:58 PM
--> To: plug@lists.phillylinux.org
--> Subject: Re: [PLUG] WARNING!!!
-->
-->
--> Walt Mankowski wrote:
--> > On Sun, Jan 25, 2004 at 01:07:53PM -0500, Edmond Kerollis wrote:
--> >
--> >>Dear PLUG friends,
--> >>When I opened my email client today I got this message from
--> my AVG antivirus:
--> >>      I-Worm/Bagle virus found in attachment
--> >>Sender: waltman@pobox.com
--> >>Subject:[PLUG] Hi
--> >>Infected file will be moved into the Virus Vault
--> >>Infected attachment will be overwritten with information
--> about AVG intervention.
--> >
--> >
--> > Interesting.  I hadn't noticed that that message claimed to be from
--> > me.  Of course this virus, and many like it, fake the sender address.
--> > I handle email on my Linux box using mutt, so there's no way I could
--> > have been infected by Bagle.  Real messages from me to this list will
--> > always be signed by my GPG signature.
--> >
--> > Walt
--> Hello Walt, I also got a message from my ISP today. The particulars are
--> below if it helps:-
--> ------------------------------------------------------------------------
--> This is the mail anti-virus program at virusgate1.snip.net.
-->
--> We BLOCKED a message addressed to you from:
--> plug-admin@lists.phillylinux.org
-->
--> containing:
--> infected: I-Worm.Bagle
-->
--> This message does not contain the virus or the original e-mail message.
-->
--> This message is just a notification and can be safely deleted.
-->
--> The person sending this virus received a notification as well.
-->
--> The attached file contains the message headers of the infected mail.
--> The headers will only be of interest to a mail administrator.
-->
--> Do not reply to this auto-generated message. All replies to
--> this message will be lost.
-->
--> Please direct any comments or questions to tech-rcpt@snip.net.
-->
--> Thank you,
-->
--> SNiP Internet and Telecommunications
-->
-->
-->
--> Received: from imgate2.snip.net (imgate2.snip.net [209.204.64.8])
--> 	by virusgate1.snip.net (Postfix) with ESMTP id 3293255403
--> 	for <592653589793238@snip.net>; Sun, 25 Jan 2004 05:19:21
--> -0500 (EST)
--> Received: from mail.netisland.net (ellesmere.netisland.net
--> [209.163.107.162])
--> 	by imgate2.snip.net (Postfix) with SMTP id 7710C60E50
--> 	for <592653589793238@snip.net>; Sun, 25 Jan 2004 05:19:24
--> -0500 (EST)
--> Received: (qmail 30868 invoked from network); 25 Jan 2004 10:19:02 -0000
--> Received: from unknown (HELO ellesmere.netisland.net) (127.0.0.1)
-->    by localhost with SMTP; 25 Jan 2004 10:19:02 -0000
--> Delivered-To: plug@netisland.net
--> Received: (qmail 30807 invoked by alias); 25 Jan 2004 10:18:11 -0000
--> Delivered-To: alias-plug@phillylinux.org
--> Delivered-To: alias-plug@phillylinux.org
--> Received: (qmail 30800 invoked by alias); 25 Jan 2004 10:18:10 -0000
--> Delivered-To: alias-plug@lists.phillylinux.org
--> Delivered-To: alias-plug@lists.phillylinux.org
--> Received: (qmail 30789 invoked from network); 25 Jan 2004 10:17:59 -0000
--> Received: from unknown (HELO celeron) (202.168.127.60)
-->    by mail.netisland.net with SMTP; 25 Jan 2004 10:17:59 -0000
--> Date: Sun, 25 Jan 2004 21:17:50 +1000
--> To: plug@lists.phillylinux.org
--> From: waltman@pobox.com
--> Message-ID: <vnwismhwxnixjejdmpk@pobox.com>
--> MIME-Version: 1.0
--> Content-Type: multipart/mixed;
-->          boundary="--------003687778602232"
--> Subject: [PLUG] Hi
--> Sender: plug-admin@lists.phillylinux.org
--> Errors-To: plug-admin@lists.phillylinux.org
--> X-BeenThere: plug@lists.phillylinux.org
--> X-Mailman-Version: 2.0.11
--> Precedence: bulk
--> Reply-To: plug@lists.phillylinux.org
--> List-Help: <mailto:plug-request@lists.phillylinux.org?subject=help>
--> List-Post: <mailto:plug@lists.phillylinux.org>
--> List-Subscribe: <http://lists.netisland.net/mailman/listinfo/plug>,
--> 	<mailto:plug-request@lists.phillylinux.org?subject=subscribe>
--> List-Id: Philadelphia Linux User's Group Discussion List
--> <plug.lists.phillylinux.org>
--> List-Unsubscribe: <http://lists.netisland.net/mailman/listinfo/plug>,
--> 	<mailto:plug-request@lists.phillylinux.org?subject=unsubscribe>

FYI FWIW:

--> From: plug-admin@lists.phillylinux.org
--> [mailto:plug-admin@lists.phillylinux.org]On Behalf Of waltman@pobox.com
--> Sent: Sunday, January 25, 2004 6:18 AM
--> To: plug@lists.phillylinux.org
--> Subject: [PLUG] Hi
-->
-->
--> This message had an attachment named "xmoiiirab.exe".  This may
--> have been a
--> virus laden email.  The email message has been moved into your
--> Filtered folder automatically by the Voicenet's Email Filtering
--> Software.  To prevent legitimate messages in the future from being
--> automatically placed in this folder, please request that the sender
--> of the email compress all attachments sent to you.  Compressing the
--> attachment will reduce the amount of download time of your email
--> messages and will not trigger our Mailfiltering mechanism for
--> viruses.
-->
--> Thank you for using Voicenet's Email Filtering.  Should you have any
--> problems, please contact support@voicenet.com for further assistance.
-->
--> Voicenet Support

and

Return-Path: <plug-admin@lists.phillylinux.org>
Delivered-To: kaze@voicenet.com
Received: (qmail 9136 invoked from network); 25 Jan 2004 10:19:46 -0000
Received: from ellesmere.netisland.net (HELO mail.netisland.net)
(209.163.107.162)
  by mailfilter1.voicenet.com with SMTP; 25 Jan 2004 10:19:46 -0000
X-Matched: ellesmere.netisland.net [209.163.107.162]
X-Trying: 209.163.107.162-Personal.
X-Trying: 162.107.163.209.bl.spamcop.net.
X-Trying: 162.107.163.209.cbl.abuseat.org.
X-Trying: 162.107.163.209.sbl.spamhaus.org.
X-Trying: 162.107.163.209.list.dsbl.org.
X-Trying: 162.107.163.209.dnsbl.njabl.org.
X-Trying: 162.107.163.209.dnsbl.ahbl.org.
X-Trying: 162.107.163.209.multihop.dsbl.org.
X-Trying: 162.107.163.209.relays.voicenet.com.
X-Trying: 162.107.163.209.dynablock.easynet.nl.
X-Trying: 162.107.163.209.blackholes.easynet.nl.
X-Trying: 162.107.163.209.proxies.blackholes.easynet.nl.
X-Trying: 162.107.163.209.ipwhois.rfc-ignorant.org.
X-Trying: 162.107.163.209.relays.ordb.org.
X-Trying: 162.107.163.209.dnsbl.sorbs.net.
X-Matched: ellesmere.netisland.net [209.163.107.162]
Received: (qmail 30901 invoked from network); 25 Jan 2004 10:19:03 -0000
Received: from unknown (HELO ellesmere.netisland.net) (127.0.0.1)
  by localhost with SMTP; 25 Jan 2004 10:19:03 -0000
Return-Path: <waltman@pobox.com>
Delivered-To: plug@netisland.net
Received: (qmail 30807 invoked by alias); 25 Jan 2004 10:18:11 -0000
Delivered-To: alias-plug@phillylinux.org
Return-Path: <waltman@pobox.com>
Delivered-To: alias-plug@phillylinux.org
Received: (qmail 30800 invoked by alias); 25 Jan 2004 10:18:10 -0000
Delivered-To: alias-plug@lists.phillylinux.org
Return-Path: <waltman@pobox.com>
Delivered-To: alias-plug@lists.phillylinux.org
Received: (qmail 30789 invoked from network); 25 Jan 2004 10:17:59 -0000
Received: from unknown (HELO celeron) (202.168.127.60)
  by mail.netisland.net with SMTP; 25 Jan 2004 10:17:59 -0000
Date: Sun, 25 Jan 2004 21:17:50 +1000
To: plug@lists.phillylinux.org
From: waltman@pobox.com
Message-ID: <vnwismhwxnixjejdmpk@pobox.com>
MIME-Version: 1.0
Subject: [PLUG] Hi
Sender: plug-admin@lists.phillylinux.org
Errors-To: plug-admin@lists.phillylinux.org
X-BeenThere: plug@lists.phillylinux.org
X-Mailman-Version: 2.0.11
Precedence: bulk
Reply-To: plug@lists.phillylinux.org
List-Help: <mailto:plug-request@lists.phillylinux.org?subject=help>
List-Post: <mailto:plug@lists.phillylinux.org>
List-Subscribe: <http://lists.netisland.net/mailman/listinfo/plug>,
	<mailto:plug-request@lists.phillylinux.org?subject=subscribe>
List-Id: Philadelphia Linux User's Group Discussion List
<plug.lists.phillylinux.org>
List-Unsubscribe: <http://lists.netisland.net/mailman/listinfo/plug>,
	<mailto:plug-request@lists.phillylinux.org?subject=unsubscribe>
X-Possible-Virus: filtered

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug