>This looks like my Postmaster account tried to send the KLEZ virus to a >listserve on the same host? Is that right?
Let's take a look: >-----Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] >Sent: Monday, October 14, 2002 2:29 PM >To: [EMAIL PROTECTED] >Subject: Article rejected, un-authorized poster of [EMAIL PROTECTED] Your listserver is sending a message to [EMAIL PROTECTED], saying that [EMAIL PROTECTED] can't post to the list. That means that [EMAIL PROTECTED] tried sending an E-mail to the list. But let's take a look to see what it was: >Date: Mon, 14 Oct 2002 14:29:27 -0400 >Message-Id: <[EMAIL PROTECTED]> >Mime-Version: 1.0 >Content-Type: text/plain; charset=us-ascii >From: "Postmaster " <[EMAIL PROTECTED]> >Reply-To: <[EMAIL PROTECTED]> >X-Sender: <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Subject: WARNING: YOU WERE SENT A VIRUS >X-Mailer: <IMail v7.13> > >The Declude Virus software on misd.net has reported that you were >sent an E-mail from [EMAIL PROTECTED], containing the W32/Klez.H@mm virus in the >play.exe attachment. The subject of the E-mail was "A funny game". >The E-mail containing the virus has been quarantined to prevent further >damage. > >Headers Follow: >Received: from out019.verizon.net [206.46.170.98] by apollo.misd.net with >ESMTP > (SMTPD32-7.13) id AD04192E014C; Mon, 14 Oct 2002 14:29:24 -0400 >Received: from Rkjtvvkku ([216.234.125.240]) by out019.verizon.net > (InterMail vM.5.01.05.09 201-253-122-126-109-20020611) with SMTP > id <20021014182236.CMGS9549.out019.verizon.net@Rkjtvvkku> > for <[EMAIL PROTECTED]>; Mon, 14 Oct 2002 13:22:36 -0500 >From: dsjbk <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: A funny game >MIME-Version: 1.0 >Content-Type: multipart/alternative; > boundary=O6t53FxP7990029Qf30GU4Wy2u2937w >Message-Id: <20021014182236.CMGS9549.out019.verizon.net@Rkjtvvkku> >Date: Mon, 14 Oct 2002 13:23:17 -0500 In this case, someone sent a virus to the list. Declude Virus sent out the notification, which the list rejected. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
