L.D., Please don't panic, you're clearly not guilty!
The virus originated from somewhere in Hong Kong (hknet.com domain) It is called "Nimda.A" and it is a worm. I think the owner of the infected machine visited the list archive, and the virus collected a bunch of e-mail addresses from there. Our e-mail addresses. The virus puts bogus e-mail addreses in the "From:" field of the messages it generates. In this case it was "l.d.best@go". Due to the the Linux-specific mechanism of retrieving mail I am employing, (fetchmail+sendmail+procmail), I was unable to read the incriminated message. Sendmail was rightful to complain the sender was inexistent :-). I had earlier used the Yahoo pop retriever and figured out what was all about. All of us should expect to receive more copies of the worm in the future, apparently sent by other members of the list. This applies if the guy in question won't find out he has an infected machine, of course Cristian Burneci DHP Technology S.R.L. phone: +(40).1.628.90.39 fax: +(40).1.628.56.52 e-mail: [EMAIL PROTECTED] http://users.pcnet.ro/dhptech Bucharest, Romania On Fri, 15 Mar 2002, L.D. Best wrote: > I don't have a virus, I don't transmit viruses. I don't even get > e-mail with viruses in it because of my ISP using Amavis software ... > all I receive is a notice that a message addressed to me had > such-and-such a virus and it was from so-and-so. > > I use Arachne and ONLY Arachne for receiving and sending e-mail. As > anyone who attaches stuff to messages in InSight knows, you have to be > very precise to intentionally attach *anything* to outgoing mail, and > you can't attach anything by accident. > > If anyone gets a virus "from me" please respond directly to ME please; > and please forward full headers of the message in question. > > l.d. > ==== > > >> Anybody else getting viruses from l.d. best? > > >> Cheers, > >> Steven > > >> ---------------------------------------------------------------------- > >> From: <l.d.best@go> > >> Subject: sampledesktopsampledesktopsampledesktopsample > >> MIME-Version: 1.0 > >> Content-Type: multipart/related; > >> type="multipart/alternative"; > >> boundary="====_ABC1234567890DEF_====" > >> X-Priority: 3 > >> X-MSMail-Priority: Normal > >> X-Unsent: 1 > >> Message-Id: <[EMAIL PROTECTED]> > >> Bcc: > >> Date: Fri, 15 Mar 2002 16:15:09 +1300 > >> X-Mozilla-Status: 0001 > > >> --====_ABC1234567890DEF_==== > >> Content-Type: multipart/alternative; > >> boundary="====_ABC0987654321DEF_====" > <snip> > > - -- Arachne V1.70;rev.3, NON-COMMERCIAL copy, http://arachne.cz/ > > ------------------------------ >
