kaze on 25 Jan 2004 21:11:02 -0000 |
--> [mailto:plug-admin@lists.phillylinux.org]On Behalf Of Stewart B Lone --> Sent: Sunday, January 25, 2004 2:58 PM --> To: plug@lists.phillylinux.org --> Subject: Re: [PLUG] WARNING!!! --> --> --> Walt Mankowski wrote: --> > On Sun, Jan 25, 2004 at 01:07:53PM -0500, Edmond Kerollis wrote: --> > --> >>Dear PLUG friends, --> >>When I opened my email client today I got this message from --> my AVG antivirus: --> >> I-Worm/Bagle virus found in attachment --> >>Sender: waltman@pobox.com --> >>Subject:[PLUG] Hi --> >>Infected file will be moved into the Virus Vault --> >>Infected attachment will be overwritten with information --> about AVG intervention. --> > --> > --> > Interesting. I hadn't noticed that that message claimed to be from --> > me. Of course this virus, and many like it, fake the sender address. --> > I handle email on my Linux box using mutt, so there's no way I could --> > have been infected by Bagle. Real messages from me to this list will --> > always be signed by my GPG signature. --> > --> > Walt --> Hello Walt, I also got a message from my ISP today. The particulars are --> below if it helps:- --> ------------------------------------------------------------------------ --> This is the mail anti-virus program at virusgate1.snip.net. --> --> We BLOCKED a message addressed to you from: --> plug-admin@lists.phillylinux.org --> --> containing: --> infected: I-Worm.Bagle --> --> This message does not contain the virus or the original e-mail message. --> --> This message is just a notification and can be safely deleted. --> --> The person sending this virus received a notification as well. --> --> The attached file contains the message headers of the infected mail. --> The headers will only be of interest to a mail administrator. --> --> Do not reply to this auto-generated message. All replies to --> this message will be lost. --> --> Please direct any comments or questions to tech-rcpt@snip.net. --> --> Thank you, --> --> SNiP Internet and Telecommunications --> --> --> --> Received: from imgate2.snip.net (imgate2.snip.net [209.204.64.8]) --> by virusgate1.snip.net (Postfix) with ESMTP id 3293255403 --> for <592653589793238@snip.net>; Sun, 25 Jan 2004 05:19:21 --> -0500 (EST) --> Received: from mail.netisland.net (ellesmere.netisland.net --> [209.163.107.162]) --> by imgate2.snip.net (Postfix) with SMTP id 7710C60E50 --> for <592653589793238@snip.net>; Sun, 25 Jan 2004 05:19:24 --> -0500 (EST) --> Received: (qmail 30868 invoked from network); 25 Jan 2004 10:19:02 -0000 --> Received: from unknown (HELO ellesmere.netisland.net) (127.0.0.1) --> by localhost with SMTP; 25 Jan 2004 10:19:02 -0000 --> Delivered-To: plug@netisland.net --> Received: (qmail 30807 invoked by alias); 25 Jan 2004 10:18:11 -0000 --> Delivered-To: alias-plug@phillylinux.org --> Delivered-To: alias-plug@phillylinux.org --> Received: (qmail 30800 invoked by alias); 25 Jan 2004 10:18:10 -0000 --> Delivered-To: alias-plug@lists.phillylinux.org --> Delivered-To: alias-plug@lists.phillylinux.org --> Received: (qmail 30789 invoked from network); 25 Jan 2004 10:17:59 -0000 --> Received: from unknown (HELO celeron) (202.168.127.60) --> by mail.netisland.net with SMTP; 25 Jan 2004 10:17:59 -0000 --> Date: Sun, 25 Jan 2004 21:17:50 +1000 --> To: plug@lists.phillylinux.org --> From: waltman@pobox.com --> Message-ID: <vnwismhwxnixjejdmpk@pobox.com> --> MIME-Version: 1.0 --> Content-Type: multipart/mixed; --> boundary="--------003687778602232" --> Subject: [PLUG] Hi --> Sender: plug-admin@lists.phillylinux.org --> Errors-To: plug-admin@lists.phillylinux.org --> X-BeenThere: plug@lists.phillylinux.org --> X-Mailman-Version: 2.0.11 --> Precedence: bulk --> Reply-To: plug@lists.phillylinux.org --> List-Help: <mailto:plug-request@lists.phillylinux.org?subject=help> --> List-Post: <mailto:plug@lists.phillylinux.org> --> List-Subscribe: <http://lists.netisland.net/mailman/listinfo/plug>, --> <mailto:plug-request@lists.phillylinux.org?subject=subscribe> --> List-Id: Philadelphia Linux User's Group Discussion List --> <plug.lists.phillylinux.org> --> List-Unsubscribe: <http://lists.netisland.net/mailman/listinfo/plug>, --> <mailto:plug-request@lists.phillylinux.org?subject=unsubscribe> FYI FWIW: --> From: plug-admin@lists.phillylinux.org --> [mailto:plug-admin@lists.phillylinux.org]On Behalf Of waltman@pobox.com --> Sent: Sunday, January 25, 2004 6:18 AM --> To: plug@lists.phillylinux.org --> Subject: [PLUG] Hi --> --> --> This message had an attachment named "xmoiiirab.exe". This may --> have been a --> virus laden email. The email message has been moved into your --> Filtered folder automatically by the Voicenet's Email Filtering --> Software. To prevent legitimate messages in the future from being --> automatically placed in this folder, please request that the sender --> of the email compress all attachments sent to you. Compressing the --> attachment will reduce the amount of download time of your email --> messages and will not trigger our Mailfiltering mechanism for --> viruses. --> --> Thank you for using Voicenet's Email Filtering. Should you have any --> problems, please contact support@voicenet.com for further assistance. --> --> Voicenet Support and Return-Path: <plug-admin@lists.phillylinux.org> Delivered-To: kaze@voicenet.com Received: (qmail 9136 invoked from network); 25 Jan 2004 10:19:46 -0000 Received: from ellesmere.netisland.net (HELO mail.netisland.net) (209.163.107.162) by mailfilter1.voicenet.com with SMTP; 25 Jan 2004 10:19:46 -0000 X-Matched: ellesmere.netisland.net [209.163.107.162] X-Trying: 209.163.107.162-Personal. X-Trying: 162.107.163.209.bl.spamcop.net. X-Trying: 162.107.163.209.cbl.abuseat.org. X-Trying: 162.107.163.209.sbl.spamhaus.org. X-Trying: 162.107.163.209.list.dsbl.org. X-Trying: 162.107.163.209.dnsbl.njabl.org. X-Trying: 162.107.163.209.dnsbl.ahbl.org. X-Trying: 162.107.163.209.multihop.dsbl.org. X-Trying: 162.107.163.209.relays.voicenet.com. X-Trying: 162.107.163.209.dynablock.easynet.nl. X-Trying: 162.107.163.209.blackholes.easynet.nl. X-Trying: 162.107.163.209.proxies.blackholes.easynet.nl. X-Trying: 162.107.163.209.ipwhois.rfc-ignorant.org. X-Trying: 162.107.163.209.relays.ordb.org. X-Trying: 162.107.163.209.dnsbl.sorbs.net. X-Matched: ellesmere.netisland.net [209.163.107.162] Received: (qmail 30901 invoked from network); 25 Jan 2004 10:19:03 -0000 Received: from unknown (HELO ellesmere.netisland.net) (127.0.0.1) by localhost with SMTP; 25 Jan 2004 10:19:03 -0000 Return-Path: <waltman@pobox.com> Delivered-To: plug@netisland.net Received: (qmail 30807 invoked by alias); 25 Jan 2004 10:18:11 -0000 Delivered-To: alias-plug@phillylinux.org Return-Path: <waltman@pobox.com> Delivered-To: alias-plug@phillylinux.org Received: (qmail 30800 invoked by alias); 25 Jan 2004 10:18:10 -0000 Delivered-To: alias-plug@lists.phillylinux.org Return-Path: <waltman@pobox.com> Delivered-To: alias-plug@lists.phillylinux.org Received: (qmail 30789 invoked from network); 25 Jan 2004 10:17:59 -0000 Received: from unknown (HELO celeron) (202.168.127.60) by mail.netisland.net with SMTP; 25 Jan 2004 10:17:59 -0000 Date: Sun, 25 Jan 2004 21:17:50 +1000 To: plug@lists.phillylinux.org From: waltman@pobox.com Message-ID: <vnwismhwxnixjejdmpk@pobox.com> MIME-Version: 1.0 Subject: [PLUG] Hi Sender: plug-admin@lists.phillylinux.org Errors-To: plug-admin@lists.phillylinux.org X-BeenThere: plug@lists.phillylinux.org X-Mailman-Version: 2.0.11 Precedence: bulk Reply-To: plug@lists.phillylinux.org List-Help: <mailto:plug-request@lists.phillylinux.org?subject=help> List-Post: <mailto:plug@lists.phillylinux.org> List-Subscribe: <http://lists.netisland.net/mailman/listinfo/plug>, <mailto:plug-request@lists.phillylinux.org?subject=subscribe> List-Id: Philadelphia Linux User's Group Discussion List <plug.lists.phillylinux.org> List-Unsubscribe: <http://lists.netisland.net/mailman/listinfo/plug>, <mailto:plug-request@lists.phillylinux.org?subject=unsubscribe> X-Possible-Virus: filtered ___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|