I didn't either... but we do some heavy virus scanning at the firewall so I'm not surprised.
-Dave >>> [EMAIL PROTECTED] 04/20/05 6:29 PM >>> Rob, FYI, I never received the email in question if that helps any. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Brooks-Bilson Sent: Wednesday, April 20, 2005 6:14 PM To: [email protected] Subject: [CFCDev] Viruses on CFCDev I will remote into our server tonight and perform a manual scan to determine whether the virus is being sent from our box or not. As we don't actually read emails on the box, and we have a virus scanner scanning inbound and outbound mail, I'm not sure how we would have become infected, although stranger things have happened. I'll post to the list when I know more. -Rob Spike <[EMAIL PROTECTED]>@cfczone.org on 04/20/2005 02:15:40 PM Please respond to [email protected] Sent by: [EMAIL PROTECTED] To: [email protected] cc: Subject: Re: [CFCDev] FYI, McAfee removed it on my machine and added a little bit of info to the bottom: ****************** McAfee VirusScan ************************ ******* Alert generated at: Wed, 20 Apr 2005 11:50:35 -0800 ********* ********************************************************************* McAfee VirusScan has detected a potential threat in this e-mail sent by "Cfcdev-owner" <[EMAIL PROTECTED]>. The following actions were attempted on each suspicious part. We strongly recommend that you report this virus-related activity to "Cfcdev-owner" <[EMAIL PROTECTED]>. The attachment "Work.zip" is infected with the W32/[EMAIL PROTECTED] Virus(es). This attachment has been quarantined. Nathan Strutz wrote: > Nah, i saved it to a text file, renamed to *.b64, opened with winzip, > it was a normal looking response, but I don't know why it was encoded > like it was. > > On 4/20/05, Brent Nicholas <[EMAIL PROTECTED]> wrote: > >>It's prolly just a virus?? >> >>Brent Nicholas - EclecticDetroit, LLC. >>http://www.EclecticDetroit.com >> >>[EMAIL PROTECTED] >>[EMAIL PROTECTED] >> >>"On the other hand, you have different fingers." >> >> >>>From: Bill Rawlinson <[EMAIL PROTECTED]> >>>Reply-To: [email protected] >>>To: [email protected] >>>Subject: Re: [CFCDev] >>>Date: Wed, 20 Apr 2005 16:25:32 -0400 >>>MIME-Version: 1.0 >>>Received: from DWS047.cflib.org ([199.231.128.19]) by mc11-f28.hotmail.com >>>with Microsoft SMTPSVC(6.0.3790.211); Wed, 20 Apr 2005 13:27:56 -0700 >>>Received: from rproxy.gmail.com ([64.233.170.199]) by cflib.org with >>>MailEnable ESMTP; Wed, 20 Apr 2005 16:21:12 -0400 >>>Received: by rproxy.gmail.com with SMTP id j1so297011rnf for >>><[email protected]>; Wed, 20 Apr 2005 13:25:33 -0700 (PDT) >>>Received: by 10.38.208.43 with SMTP id f43mr1343052rng; Wed, 20 Apr >>>2005 13:25:32 -0700 (PDT) >>>Received: by 10.38.92.10 with HTTP; Wed, 20 Apr 2005 13:25:32 -0700 (PDT) >>>X-Message-Info: JGTYoYF78jFsR8HZwK44MdEnjgrNp0gplSv5OZGfRjg= >>>DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; >>>d=gmail.com; >>>h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-vers ion:content-type:references; >>> >>>b=JgslsmFSGEs8iIvi42umhpE3rVMjJYArtScpnkFZczGQwNfNFj4iGxMnnw/pNNNnitmw7Z0 vXk6idxQ6T6E8SCAIn/618VWuE1Vu7yN8Nq8uEnxBbO5jD6JOvlPLAGaPUpZnzJSX5f0M5XKr/mZ IP698Uke/OTDyHo/W0IXjTrE= >>>References: <[EMAIL PROTECTED]> >>>Precedence: bulk >>>Return-Path: <[EMAIL PROTECTED]> >>>X-OriginalArrivalTime: 20 Apr 2005 20:27:56.0426 (UTC) >>>FILETIME=[6FBBAEA0:01C545E7] >>> >>>glad someone asked - I didn't know what he was talking about either :O) >>> >>>On 4/20/05, Rob Brooks-Bilson <[EMAIL PROTECTED]> wrote: >>> >>>>Peter, >>>> >>>>What Zip are you referring to? I don't see a Zip on this end. >>>> >>>>-Rob >>>> >>>>"Peter J. Farrell" >>> >>><[EMAIL PROTECTED]>@cfczone.org<http://cfczone.org>on 04/20/2005 >>> >>>>12:58:28 PM >>>> >>>>Please respond to [email protected] >>>> >>>>Sent by: [EMAIL PROTECTED] >>>> >>>>To: [email protected] >>>>cc: >>>> >>>>Subject: Re: [CFCDev] >>>> >>>> >>>>Cfcdev-owner wrote: >>>> >>>> >>>>> >>>>> >>>>>---------------------------------------------------------- >>>>>You are subscribed to cfcdev. To unsubscribe, send an email to >>>>>[email protected] with the words 'unsubscribe cfcdev' as the subject >>>>>of the email. >>>>> >>>>>CFCDev is run by CFCZone (www.cfczone.org <http://www.cfczone.org>) >>> >>>and >>> >>>>supported by CFXHosting >>>> >>>>>(www.cfxhosting.com <http://www.cfxhosting.com>). >>>>> >>>>>An archive of the CFCDev list is available at >>>>> >>> >>>www.mail-archive.com/[email protected]< http://www.mail-archive.com/[email protected]> >>> >>>>Umm...excuse my ignorance...what was attached the zip for? >>>> >>>>-- >>>>Peter J. Farrell :: Maestro Publishing >>>> >>>>blog :: http://blog.maestropublishing.com >>>>email :: [EMAIL PROTECTED] >>>> >>>>Create boilerplate beans! >>>>Check out the Mach-II Bean Creator - free download. >>>>http://blog.maestropublishing.com/mach-ii_beaner.htm >>>> >>>>Old Computer programmers never die, they just decompile. >>>> >>>>-- >>>> >>>>---------------------------------------------------------- >>>>You are subscribed to cfcdev. To unsubscribe, send an email to >>>>[email protected] with the words 'unsubscribe cfcdev' as the subject of >>>>the email. >>>> >>>>CFCDev is run by CFCZone (www.cfczone.org <http://www.cfczone.org>) and >>>>supported by CFXHosting >>>>(www.cfxhosting.com <http://www.cfxhosting.com>). >>>> >>>>An archive of the CFCDev list is available at >>>> >>> >>>www.mail-archive.com/[email protected]< http://www.mail-archive.com/[email protected]> >>> >>>>---------------------------------------------------------- >>>>You are subscribed to cfcdev. To unsubscribe, send an email to >>>>[email protected] with the words 'unsubscribe cfcdev' as the subject of >>>>the email. >>>> >>>>CFCDev is run by CFCZone (www.cfczone.org <http://www.cfczone.org>) and >>>>supported by CFXHosting (www.cfxhosting.com >>> >>><http://www.cfxhosting.com>). >>> >>>>An archive of the CFCDev list is available at >>>> >>> >>>www.mail-archive.com/[email protected]< http://www.mail-archive.com/[email protected]> >>> >>>> >>> >>>-- >>>[EMAIL PROTECTED] >>>http://blog.rawlinson.us >>> >>>If you want Gmail - just ask. >>> >>> >>> >>>---------------------------------------------------------- >>>You are subscribed to cfcdev. To unsubscribe, send an email to >>>[email protected] with the words 'unsubscribe cfcdev' as the subject of >>>the email. >>> >>>CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting >>>(www.cfxhosting.com). >>> >>>An archive of the CFCDev list is available at >>>www.mail-archive.com/[email protected] >> >>---------------------------------------------------------- >>You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email. >> >>CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com). >> >>An archive of the CFCDev list is available at >>www.mail-archive.com/[email protected] >> >> > > > > ---------------------------------------------------------- > You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email. > > CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com). > > An archive of the CFCDev list is available at > www.mail-archive.com/[email protected] > > > -- -------------------------------------------- Stephen Milligan Code poet for hire http://www.spike.org.uk Do you cfeclipse? http://cfeclipse.tigris.org ---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email. CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com). An archive of the CFCDev list is available at www.mail-archive.com/[email protected] ---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email. CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com). An archive of the CFCDev list is available at www.mail-archive.com/[email protected] ---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email. CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com). An archive of the CFCDev list is available at www.mail-archive.com/[email protected] ---------------------------------------------------------- You are subscribed to cfcdev. To unsubscribe, send an email to [email protected] with the words 'unsubscribe cfcdev' as the subject of the email. CFCDev is run by CFCZone (www.cfczone.org) and supported by CFXHosting (www.cfxhosting.com). An archive of the CFCDev list is available at www.mail-archive.com/[email protected]
