Virus Warning

Virus Warning

[administrator]

The message you emailed to fenris@lyta.cc.vt.edu, dated 08/20/03 16:41:17, contains the W32/Sobig-F virus in the wicked_scr.scr attachment. The action taken was: deleted the attachment.




-------------------------------------------------------
This SF.net email is sponsored by Dice.com.
Did you know that Dice has over 25,000 tech jobs available today? From
careers in IT to Engineering to Tech Sales, Dice has tech jobs from the
best hiring companies. http://www.dice.com/index.epl?rel_code=104

Re: virus warning

[Babar Kazmi]

Dear

We all will know on 1st Feb as the trigger starts :)
Any how lets the keep the fingers crossed and hold tight the input policy ..

Regards

Babar Kazmi.

>
>In this case, we are protected !!!!!
>
>We are all using a firewall with netfilter and input policy drop
>
>:))))
>
>
>
>----- Original Message ----- 
>From: "Fritz Mesedilla"
>To: "Netfilter Mailing List (E-mail)"
>Sent: Tuesday, January 27, 2004 4:30 AM
>Subject: RE: virus warning
>
>
>
>I forgot to send the details.
>
>
>W32.Novarg.A@mm is a mass-mailing worm. The worm will arrive as an
>attachment with a file extension of .bat, .cmd, .exe, .pif, .scr, or .zip.
>
>When the machine gets infected, the worm will set up a backdoor into the
>system by opening TCP ports 3127 thru 3198. This will potentially allow a
>hacker to connect to the machine and utilize it as a proxy to gain access
to
>it's network resources. In addition, the backdoor has the ability to
>download and execute arbitrary files.
>
>The worm will perform a DoS starting on February 1, 2004. On February 12,
>2004 the worm has a trigger date to stop spreading.
>
>
>http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.htm
l
>
>
>
>Cheers,
>
>fritz
>--- 
>+ Basta Ikaw Lord
>
>
>
>
>-----Original Message----- 
>From:
>Sent: Tuesday, January 27, 2004 2:45 PM
>To: Netfilter Mailing List (E-mail)
>Subject: Re: virus warning
>
>
>
>Obviously this is a really new one ... F-prot didn't catch it .. and mines
>up to date ...
>However ... since kmail and linux don't much like 7 bit mime ... *grin*
>
>I'm handing this one up to the folks at F-Prot to see why they didn't catch
>it...
>
>
>Alistair.
>
>On January 27, 2004 12:44 am, Fritz Mesedilla wrote:
> > friends,
> >
> > we got a virus in our list.
> > clamav warned me about it.
> > it's now spreading like fire even on other lists.
> >
> > thought you might like to be warned.
> >
> >
> > Cheers,
> >
> > fritz
> > --- 
> > + Basta Ikaw Lord
> >
> >
> >
> >
> > ---------------------------------------------------------------------- 
> > This email and any files transmitted with it are confidential and
> > intended solely for the use of the individual or entity to whom they
> > are addressed. If you have received this email in error please notify
> > the sender immediately by e-mail and delete this e-mail from your
> > system. Please note that any views or opinions presented in this
> > email are solely those of the author and do not necessarily represent
> > those of the company. Finally, the recipient should check this email
> > and any attachments for the presence of viruses. The company accepts
> > no liability for any damage caused by any virus transmitted by this
> > email.
> >
> > Overture Media, Inc.
> > Direct Line: (632) 635-4785
> > Trunkline:   (632) 631-8971 Local 146
> > Fax: (632) 637-2206
> > Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
> > Quezon City 1100
>
>
>---------------------------------------------------------------------- 
>This email and any files transmitted with it are confidential and
>intended solely for the use of the individual or entity to whom they
>are addressed. If you have received this email in error please notify
>the sender immediately by e-mail and delete this e-mail from your
>system. Please note that any views or opinions presented in this
>email are solely those of the author and do not necessarily represent
>those of the company. Finally, the recipient should check this email
>and any attachments for the presence of viruses. The company accepts
>no liability for any damage caused by any virus transmitted by this
>email.
>
>Overture Media, Inc.
>Direct Line: (632) 635-4785
>Trunkline:   (632) 631-8971 Local 146
>Fax: (632) 637-2206
>Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
>Quezon City 1100
>
>
>
>
>

Re: virus warning

[Nilesh]

How do u add rule in iptable firewall for this 
in my mail server there are two cards
eth0 for internet and eth1 for lan 
please let me know ASAP
thanks

--- Alexis <alexis@attla.net.ar> wrote:
> In this case, we are protected !!!!!
> 
> We are all using a firewall with netfilter and input
> policy drop
> 
> :))))
> 
> 
> 
> ----- Original Message ----- 
> From: "Fritz Mesedilla"
> <fritz.mesedilla@overturemedia.com>
> To: "Netfilter Mailing List (E-mail)"
> <netfilter@lists.netfilter.org>
> Sent: Tuesday, January 27, 2004 4:30 AM
> Subject: RE: virus warning
> 
> 
> 
> I forgot to send the details.
> 
> 
> W32.Novarg.A@mm is a mass-mailing worm. The worm
> will arrive as an
> attachment with a file extension of .bat, .cmd,
> .exe, .pif, .scr, or .zip.
> 
> When the machine gets infected, the worm will set up
> a backdoor into the
> system by opening TCP ports 3127 thru 3198. This
> will potentially allow a
> hacker to connect to the machine and utilize it as a
> proxy to gain access to
> it's network resources. In addition, the backdoor
> has the ability to
> download and execute arbitrary files.
> 
> The worm will perform a DoS starting on February 1,
> 2004. On February 12,
> 2004 the worm has a trigger date to stop spreading.
> 
> 
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html
> 
> 
> 
> Cheers,
> 
> fritz <www.mesedilla.com>
> ---
> + Basta Ikaw Lord
> 
> 
> 
> 
> -----Original Message-----
> From:
> Sent: Tuesday, January 27, 2004 2:45 PM
> To: Netfilter Mailing List (E-mail)
> Subject: Re: virus warning
> 
> 
> 
> Obviously this is a really new one ... F-prot didn't
> catch it .. and mines
> up to date ...
> However ... since kmail and linux don't much like 7
> bit mime ... *grin*
> 
> I'm handing this one up to the folks at F-Prot to
> see why they didn't catch
> it...
> 
> 
> Alistair.
> 
> On January 27, 2004 12:44 am, Fritz Mesedilla wrote:
> > friends,
> >
> > we got a virus in our list.
> > clamav warned me about it.
> > it's now spreading like fire even on other lists.
> >
> > thought you might like to be warned.
> >
> >
> > Cheers,
> >
> > fritz <www.mesedilla.com>
> > ---
> > + Basta Ikaw Lord
> >
> >
> >
> >
> >
>
----------------------------------------------------------------------
> > This email and any files transmitted with it are
> confidential and
> > intended solely for the use of the individual or
> entity to whom they
> > are addressed. If you have received this email in
> error please notify
> > the sender immediately by e-mail and delete this
> e-mail from your
> > system. Please note that any views or opinions
> presented in this
> > email are solely those of the author and do not
> necessarily represent
> > those of the company. Finally, the recipient
> should check this email
> > and any attachments for the presence of viruses.
> The company accepts
> > no liability for any damage caused by any virus
> transmitted by this
> > email.
> >
> > Overture Media, Inc.
> > Direct Line: (632) 635-4785
> > Trunkline:   (632) 631-8971 Local 146
> > Fax: (632) 637-2206
> > Level 1 Summit Media Offices, Robinsons Galleria
> EDSA Cor. Ortigas Ave.,
> > Quezon City 1100
> 
> 
>
----------------------------------------------------------------------
> This email and any files transmitted with it are
> confidential and
> intended solely for the use of the individual or
> entity to whom they
> are addressed. If you have received this email in
> error please notify
> the sender immediately by e-mail and delete this
> e-mail from your
> system. Please note that any views or opinions
> presented in this
> email are solely those of the author and do not
> necessarily represent
> those of the company. Finally, the recipient should
> check this email
> and any attachments for the presence of viruses. The
> company accepts
> no liability for any damage caused by any virus
> transmitted by this
> email.
> 
> Overture Media, Inc.
> Direct Line: (632) 635-4785
> Trunkline:   (632) 631-8971 Local 146
> Fax: (632) 637-2206
> Level 1 Summit Media Offices, Robinsons Galleria
> EDSA Cor. Ortigas Ave.,
> Quezon City 1100
> 
> 
> 
> 
> 


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/

Re: virus warning

[Juan Hernandez]

yes, it's the SCO virus ;)

On Tue, 2004-01-27 at 03:38, Info wrote:
> ClamAV has detected it. Stopping more than 30 emails since this morning
> ----- Original Message ----- 
> From: <Alistair Tonner>
> To: "Netfilter Mailing List (E-mail)" <netfilter@lists.netfilter.org>
> Sent: Tuesday, January 27, 2004 2:45 PM
> Subject: Re: virus warning
> 
> 
> >
> > Obviously this is a really new one ... F-prot didn't catch it .. and mines
> up to date ...
> > However ... since kmail and linux don't much like 7 bit mime ... *grin*
> >
> > I'm handing this one up to the folks at F-Prot to see why they didn't
> catch it...
> >
> >
> > Alistair.
> >
> > On January 27, 2004 12:44 am, Fritz Mesedilla wrote:
> > > friends,
> > >
> > > we got a virus in our list.
> > > clamav warned me about it.
> > > it's now spreading like fire even on other lists.
> > >
> > > thought you might like to be warned.
> > >
> > >
> > > Cheers,
> > >
> > > fritz <www.mesedilla.com>
> > > ---
> > > + Basta Ikaw Lord
> > >
> > >
> > >
> > >
> > > ----------------------------------------------------------------------
> > > This email and any files transmitted with it are confidential and
> > > intended solely for the use of the individual or entity to whom they
> > > are addressed. If you have received this email in error please notify
> > > the sender immediately by e-mail and delete this e-mail from your
> > > system. Please note that any views or opinions presented in this
> > > email are solely those of the author and do not necessarily represent
> > > those of the company. Finally, the recipient should check this email
> > > and any attachments for the presence of viruses. The company accepts
> > > no liability for any damage caused by any virus transmitted by this
> > > email.
> > >
> > > Overture Media, Inc.
> > > Direct Line: (632) 635-4785
> > > Trunkline:   (632) 631-8971 Local 146
> > > Fax: (632) 637-2206
> > > Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
> > > Quezon City 1100
> >
> >
> 
> 
> 

Re: virus warning

[Juan Hernandez]

Is this the new SCO virus? if it is... I'll infect all the computers in
my network in purpose ;)


Juan 

On Tue, 2004-01-27 at 03:38, Info wrote:
> ClamAV has detected it. Stopping more than 30 emails since this morning
> ----- Original Message ----- 
> From: <Alistair Tonner>
> To: "Netfilter Mailing List (E-mail)" <netfilter@lists.netfilter.org>
> Sent: Tuesday, January 27, 2004 2:45 PM
> Subject: Re: virus warning
> 
> 
> >
> > Obviously this is a really new one ... F-prot didn't catch it .. and mines
> up to date ...
> > However ... since kmail and linux don't much like 7 bit mime ... *grin*
> >
> > I'm handing this one up to the folks at F-Prot to see why they didn't
> catch it...
> >
> >
> > Alistair.
> >
> > On January 27, 2004 12:44 am, Fritz Mesedilla wrote:
> > > friends,
> > >
> > > we got a virus in our list.
> > > clamav warned me about it.
> > > it's now spreading like fire even on other lists.
> > >
> > > thought you might like to be warned.
> > >
> > >
> > > Cheers,
> > >
> > > fritz <www.mesedilla.com>
> > > ---
> > > + Basta Ikaw Lord
> > >
> > >
> > >
> > >
> > > ----------------------------------------------------------------------
> > > This email and any files transmitted with it are confidential and
> > > intended solely for the use of the individual or entity to whom they
> > > are addressed. If you have received this email in error please notify
> > > the sender immediately by e-mail and delete this e-mail from your
> > > system. Please note that any views or opinions presented in this
> > > email are solely those of the author and do not necessarily represent
> > > those of the company. Finally, the recipient should check this email
> > > and any attachments for the presence of viruses. The company accepts
> > > no liability for any damage caused by any virus transmitted by this
> > > email.
> > >
> > > Overture Media, Inc.
> > > Direct Line: (632) 635-4785
> > > Trunkline:   (632) 631-8971 Local 146
> > > Fax: (632) 637-2206
> > > Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
> > > Quezon City 1100
> >
> >
> 
> 
> 

Re: virus warning

[Alexis]

In this case, we are protected !!!!!

We are all using a firewall with netfilter and input policy drop

:))))



----- Original Message ----- 
From: "Fritz Mesedilla" <fritz.mesedilla@overturemedia.com>
To: "Netfilter Mailing List (E-mail)" <netfilter@lists.netfilter.org>
Sent: Tuesday, January 27, 2004 4:30 AM
Subject: RE: virus warning



I forgot to send the details.


W32.Novarg.A@mm is a mass-mailing worm. The worm will arrive as an
attachment with a file extension of .bat, .cmd, .exe, .pif, .scr, or .zip.

When the machine gets infected, the worm will set up a backdoor into the
system by opening TCP ports 3127 thru 3198. This will potentially allow a
hacker to connect to the machine and utilize it as a proxy to gain access to
it's network resources. In addition, the backdoor has the ability to
download and execute arbitrary files.

The worm will perform a DoS starting on February 1, 2004. On February 12,
2004 the worm has a trigger date to stop spreading.


http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html



Cheers,

fritz <www.mesedilla.com>
---
+ Basta Ikaw Lord




-----Original Message-----
From:
Sent: Tuesday, January 27, 2004 2:45 PM
To: Netfilter Mailing List (E-mail)
Subject: Re: virus warning



Obviously this is a really new one ... F-prot didn't catch it .. and mines
up to date ...
However ... since kmail and linux don't much like 7 bit mime ... *grin*

I'm handing this one up to the folks at F-Prot to see why they didn't catch
it...


Alistair.

On January 27, 2004 12:44 am, Fritz Mesedilla wrote:
> friends,
>
> we got a virus in our list.
> clamav warned me about it.
> it's now spreading like fire even on other lists.
>
> thought you might like to be warned.
>
>
> Cheers,
>
> fritz <www.mesedilla.com>
> ---
> + Basta Ikaw Lord
>
>
>
>
> ----------------------------------------------------------------------
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the sender immediately by e-mail and delete this e-mail from your
> system. Please note that any views or opinions presented in this
> email are solely those of the author and do not necessarily represent
> those of the company. Finally, the recipient should check this email
> and any attachments for the presence of viruses. The company accepts
> no liability for any damage caused by any virus transmitted by this
> email.
>
> Overture Media, Inc.
> Direct Line: (632) 635-4785
> Trunkline:   (632) 631-8971 Local 146
> Fax: (632) 637-2206
> Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
> Quezon City 1100


----------------------------------------------------------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender immediately by e-mail and delete this e-mail from your
system. Please note that any views or opinions presented in this
email are solely those of the author and do not necessarily represent
those of the company. Finally, the recipient should check this email
and any attachments for the presence of viruses. The company accepts
no liability for any damage caused by any virus transmitted by this
email.

Overture Media, Inc.
Direct Line: (632) 635-4785
Trunkline:   (632) 631-8971 Local 146
Fax: (632) 637-2206
Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
Quezon City 1100

Re: virus warning

[Cedric Blancher]

Le mar 27/01/2004 à 08:38, Info a écrit :
> ClamAV has detected it. Stopping more than 30 emails since this morning

Full Disclosure was affected and other mailing lists too... Well, maybe
it's time to get rid of sender's notifications...

-- 
http://www.netexit.com/~sid/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread! 

Re: virus warning

[Info]

ClamAV has detected it. Stopping more than 30 emails since this morning
----- Original Message ----- 
From: <Alistair Tonner>
To: "Netfilter Mailing List (E-mail)" <netfilter@lists.netfilter.org>
Sent: Tuesday, January 27, 2004 2:45 PM
Subject: Re: virus warning


>
> Obviously this is a really new one ... F-prot didn't catch it .. and mines
up to date ...
> However ... since kmail and linux don't much like 7 bit mime ... *grin*
>
> I'm handing this one up to the folks at F-Prot to see why they didn't
catch it...
>
>
> Alistair.
>
> On January 27, 2004 12:44 am, Fritz Mesedilla wrote:
> > friends,
> >
> > we got a virus in our list.
> > clamav warned me about it.
> > it's now spreading like fire even on other lists.
> >
> > thought you might like to be warned.
> >
> >
> > Cheers,
> >
> > fritz <www.mesedilla.com>
> > ---
> > + Basta Ikaw Lord
> >
> >
> >
> >
> > ----------------------------------------------------------------------
> > This email and any files transmitted with it are confidential and
> > intended solely for the use of the individual or entity to whom they
> > are addressed. If you have received this email in error please notify
> > the sender immediately by e-mail and delete this e-mail from your
> > system. Please note that any views or opinions presented in this
> > email are solely those of the author and do not necessarily represent
> > those of the company. Finally, the recipient should check this email
> > and any attachments for the presence of viruses. The company accepts
> > no liability for any damage caused by any virus transmitted by this
> > email.
> >
> > Overture Media, Inc.
> > Direct Line: (632) 635-4785
> > Trunkline:   (632) 631-8971 Local 146
> > Fax: (632) 637-2206
> > Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
> > Quezon City 1100
>
>

RE: virus warning

[Fritz Mesedilla]

I forgot to send the details.


W32.Novarg.A@mm is a mass-mailing worm. The worm will arrive as an attachment with a file extension of .bat, .cmd, .exe, .pif, .scr, or .zip. 

When the machine gets infected, the worm will set up a backdoor into the system by opening TCP ports 3127 thru 3198. This will potentially allow a hacker to connect to the machine and utilize it as a proxy to gain access to it's network resources. In addition, the backdoor has the ability to download and execute arbitrary files.

The worm will perform a DoS starting on February 1, 2004. On February 12, 2004 the worm has a trigger date to stop spreading.


http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html



Cheers,

fritz <www.mesedilla.com>
---
+ Basta Ikaw Lord




-----Original Message-----
From: 
Sent: Tuesday, January 27, 2004 2:45 PM
To: Netfilter Mailing List (E-mail)
Subject: Re: virus warning



	Obviously this is a really new one ... F-prot didn't catch it .. and mines up to date ... 
	However ... since kmail and linux don't much like 7 bit mime ... *grin* 

	I'm handing this one up to the folks at F-Prot to see why they didn't catch it...


	Alistair.

On January 27, 2004 12:44 am, Fritz Mesedilla wrote:
> friends,
>
> we got a virus in our list.
> clamav warned me about it.
> it's now spreading like fire even on other lists.
>
> thought you might like to be warned.
>
>
> Cheers,
>
> fritz <www.mesedilla.com>
> ---
> + Basta Ikaw Lord
>
>
>
>
> ----------------------------------------------------------------------
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the sender immediately by e-mail and delete this e-mail from your
> system. Please note that any views or opinions presented in this
> email are solely those of the author and do not necessarily represent
> those of the company. Finally, the recipient should check this email
> and any attachments for the presence of viruses. The company accepts
> no liability for any damage caused by any virus transmitted by this
> email.
>
> Overture Media, Inc.
> Direct Line: (632) 635-4785
> Trunkline:   (632) 631-8971 Local 146
> Fax: (632) 637-2206
> Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
> Quezon City 1100


----------------------------------------------------------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender immediately by e-mail and delete this e-mail from your
system. Please note that any views or opinions presented in this
email are solely those of the author and do not necessarily represent
those of the company. Finally, the recipient should check this email
and any attachments for the presence of viruses. The company accepts
no liability for any damage caused by any virus transmitted by this
email. 

Overture Media, Inc.
Direct Line: (632) 635-4785
Trunkline:   (632) 631-8971 Local 146
Fax: (632) 637-2206
Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave., Quezon City 1100

Re: virus warning

[Unknown, Alistair Tonner]

	Obviously this is a really new one ... F-prot didn't catch it .. and mines up to date ... 
	However ... since kmail and linux don't much like 7 bit mime ... *grin* 

	I'm handing this one up to the folks at F-Prot to see why they didn't catch it...


	Alistair.

On January 27, 2004 12:44 am, Fritz Mesedilla wrote:
> friends,
>
> we got a virus in our list.
> clamav warned me about it.
> it's now spreading like fire even on other lists.
>
> thought you might like to be warned.
>
>
> Cheers,
>
> fritz <www.mesedilla.com>
> ---
> + Basta Ikaw Lord
>
>
>
>
> ----------------------------------------------------------------------
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the sender immediately by e-mail and delete this e-mail from your
> system. Please note that any views or opinions presented in this
> email are solely those of the author and do not necessarily represent
> those of the company. Finally, the recipient should check this email
> and any attachments for the presence of viruses. The company accepts
> no liability for any damage caused by any virus transmitted by this
> email.
>
> Overture Media, Inc.
> Direct Line: (632) 635-4785
> Trunkline:   (632) 631-8971 Local 146
> Fax: (632) 637-2206
> Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave.,
> Quezon City 1100

virus warning

[Fritz Mesedilla]

friends,

we got a virus in our list.
clamav warned me about it.
it's now spreading like fire even on other lists.

thought you might like to be warned.


Cheers,

fritz <www.mesedilla.com>
---
+ Basta Ikaw Lord




----------------------------------------------------------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender immediately by e-mail and delete this e-mail from your
system. Please note that any views or opinions presented in this
email are solely those of the author and do not necessarily represent
those of the company. Finally, the recipient should check this email
and any attachments for the presence of viruses. The company accepts
no liability for any damage caused by any virus transmitted by this
email. 

Overture Media, Inc.
Direct Line: (632) 635-4785
Trunkline:   (632) 631-8971 Local 146
Fax: (632) 637-2206
Level 1 Summit Media Offices, Robinsons Galleria EDSA Cor. Ortigas Ave., Quezon City 1100

Virus Warning

[administrator-PjAqaU27lzQ]

Your email address was listed as the sender of a message emailed to rwgrubbs-PjAqaU27lzQ@public.gmane.org, dated 09/07/03 05:47:35, containing the W32/Sobig-F virus in the application.pif attachment. The action taken was: deleted the attachment.

You may not have sent this virus; some viruses, such as SOBIG, KLEZ, SIRCAM, and others, regularly spoof, or falsify, the sender address to hide their origin.  This message is sent to warn you to virus check your system if you do not do so regularly, and if you do, that others may accuse you of having sent them a virus, even if you did not do so.  It does *not* necessarily mean your system is infected.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Virus Warning

[administrator-PjAqaU27lzQ]

Your email address was listed as the sender of a message emailed to rwgrubbs-PjAqaU27lzQ@public.gmane.org, dated 09/06/03 07:52:40, containing the W32/Sobig-F virus in the document_9446.pif attachment. The action taken was: deleted the attachment.

You may not have sent this virus; some viruses, such as SOBIG, KLEZ, SIRCAM, and others, regularly spoof, or falsify, the sender address to hide their origin.  This message is sent to warn you to virus check your system if you do not do so regularly, and if you do, that others may accuse you of having sent them a virus, even if you did not do so.  It does *not* necessarily mean your system is infected.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Virus Warning

[administrator-PjAqaU27lzQ]

Your email address was listed as the sender of a message emailed to fenris-KLuS98vDudU+MCppTbuXNA@public.gmane.org, dated 09/05/03 18:29:02, containing the W32/Sobig-F virus in the details.pif attachment. The action taken was: deleted the attachment.

You may not have sent this virus; some viruses, such as SOBIG, KLEZ, SIRCAM, and others, regularly spoof, or falsify, the sender address to hide their origin.  This message is sent to warn you to virus check your system if you do not do so regularly, and if you do, that others may accuse you of having sent them a virus, even if you did not do so.  It does *not* necessarily mean your system is infected.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Re: Virus Warning

[Bas Mevissen]

Russell King wrote:

> On Wed, Sep 03, 2003 at 05:54:37AM -0400, administrator@vt.edu wrote:
> 
>>The message you emailed to Valdis.Kletnieks@vt.edu, dated 09/03/03
>>05:54:37, contains the W32/Sobig-F virus in the thank_you.pif
>>attachment. The action taken was: deleted the attachment.
> 
> Please note that I have no intention of trying to stop these bounces -
> many of them are virtually impossible to reliably trap.
> 

Probably you can catch easely quite some of them, but people can do that 
for themselves too. So you are right not waisting your time on it.

Bas.

Virus Warning

[administrator]

The message you emailed to fenris@lyta.cc.vt.edu, dated 09/03/03 06:59:44, contains the W32/Sobig-F virus in the wicked_scr.scr attachment. The action taken was: deleted the attachment.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Re: Virus Warning

[Russell King]

On Wed, Sep 03, 2003 at 05:54:37AM -0400, administrator@vt.edu wrote:
> The message you emailed to Valdis.Kletnieks@vt.edu, dated 09/03/03
> 05:54:37, contains the W32/Sobig-F virus in the thank_you.pif
> attachment. The action taken was: deleted the attachment.

Please note that I have no intention of trying to stop these bounces -
many of them are virtually impossible to reliably trap.

If they bother people, please complain to the originator - Sobig-F
is a virus which uses faked mail from addresses to spread, and as
such, MTAs should _not_ generate bounces for these types of viruses.

-- 
Russell King (rmk@arm.linux.org.uk)                The developer of ARM Linux
             http://www.arm.linux.org.uk/personal/aboutme.html

Virus Warning

[administrator-PjAqaU27lzQ]

The message you emailed to fenris-KLuS98vDudU+MCppTbuXNA@public.gmane.org, dated 09/03/03 01:38:53, contains the W32/Sobig-F virus in the document_all.pif attachment. The action taken was: deleted the attachment.




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Virus Warning

[administrator]

The message you emailed to rwgrubbs@vt.edu, dated 09/02/03 23:33:34, contains the W32/Sobig-F virus in the wicked_scr.scr attachment. The action taken was: deleted the attachment.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Virus Warning

[administrator-PjAqaU27lzQ]

The message you emailed to fenris-KLuS98vDudU+MCppTbuXNA@public.gmane.org, dated 09/02/03 07:00:12, contains the W32/Sobig-F virus in the details.pif attachment. The action taken was: deleted the attachment.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Virus Warning

[administrator-PjAqaU27lzQ]

The message you emailed to fenris-KLuS98vDudU+MCppTbuXNA@public.gmane.org, dated 09/01/03 22:41:34, contains the W32/Sobig-F virus in the wicked_scr.scr attachment. The action taken was: deleted the attachment.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Virus Warning

[administrator-PjAqaU27lzQ]

The message you emailed to dweand-PjAqaU27lzQ@public.gmane.org, dated 08/30/03 19:22:24, contains the W32/Sobig-F virus in the document_all.pif attachment. The action taken was: deleted the attachment.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Virus Warning

[administrator]

The message you emailed to fenris@lyta.cc.vt.edu, dated 08/27/03 05:46:41, contains the W32/Sobig-F virus in the wicked_scr.scr attachment. The action taken was: deleted the attachment.




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

Virus Warning

[administrator-PjAqaU27lzQ]

The message you emailed to rwgrubbs-PjAqaU27lzQ@public.gmane.org, dated 06/26/03 16:06:56, contains the W32/Sobig-E virus in the your_details.zip attachment. The action taken was: deleted the attachment.



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php