Damian Menscher wrote: > I've been getting plenty of those German spams, and they're almost all > coming from prod-infinitum.com.mx. Interestingly, I got one that > spoofed its From: header as [EMAIL PROTECTED] Which indicates that an > active clamav user is infected.
You mean a user that has actually used that address, I haven't. > So, I did the obvious thing and grepped for that domian in my mailspool. > Turns up one hit, for Rene Berber. I write to this list occasionally. > Could you check your machines please? Checked and it's clean. > (Yes, I realize this is circumstantial evidence, but that netblock isn't > exactly huge, Is IS huge, it covers all the country as Prodigy is the major provider. > and the [EMAIL PROTECTED] address that was spoofed makes it > pretty unlikely that it was some random person....) Your post, with my name in the subject is very unpolite. -- Ren� Berber _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
