Hi Declan, what's even worse is that one of my email accounts really gets bombed by these viruses for weeks now. Since I onw the corresponding domain name, even emails to non existing users inside this domain arrive at the root account and it's about 50 or so viruses per day.
All of them come in a form similar to yours, telling the unaware user (who can ever be so stupid!!!???!!!) that the attachment has been checked and found clear of viruses. Some come in encrypted ZIP archives with the key inside the message, and so on... With the faked return addresses and network scripts I wonder who has those infected systems and doesn't even notice or care.. By the way, thanks Jaap for the link. At least my laptop was clean - my other computers are waiting for the movers to be moved towards my new appartment tomorrow... Uwe. DM> Artificial intelligence seems to be making huge forward strides. Look at DM> this virus generated e-mail. DM> From [EMAIL PROTECTED] Tue Apr 13 08:34:31 2004 DM> The key 'received' line is: DM> Received: from ntlworld.ie ([217.232.184.30]) by mta04-svc.ntlworld.com DM> (InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP DM> id DM> <[EMAIL PROTECTED]> DM> Tue, 13 Apr 2004 09:31:00 +0100 DM> 217.232.184.30 is actually deutche telecom. NTL's numbers are DM> 62.254.xxx.xxx. It wrote me: DM> The sample file you sent contains a new virus version of mydoom.j. DM> Please clean your system with the attached signature. DM> Sincerly, DM> Robert Ferrew DM> +++ Attachment: No Virus found DM> +++ Bitdefender AntiVirus - www.bitdefender.com DM> ------=_NextPart_000_0016----=_NextPart_000_0016 DM> Content-Type: application/octet-stream; DM> name="datfiles.zip" DM> Content-Transfer-Encoding: base64 DM> Content-Disposition: attachment; DM> filename="datfiles.zip" DM> which was the virus, of course. DM> -- DM> With best Regards, DM> Declan Moriarty. -- Author: Uwe Zimmermann INET: [EMAIL PROTECTED] Fat City Hosting, San Diego, California -- http://www.fatcity.com --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB CHIPDIR-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
