In case anyone's interested in the last Received: header on
that message, here it is:

Delivered-To: gimp-user@lists.xcf.berkeley.edu
Received: from kamery.org (pe113.radomsko.sdi.tpnet.pl [217.96.203.113])
        by lists.XCF.Berkeley.EDU (Postfix) with SMTP id 28EDC11418
        for <gimp-user@lists.xcf.berkeley.edu>;
        Mon, 14 Feb 2005 04:40:37 -0800 (PST)

I have the rest of the message saved if anyone wants to do any
forensics on it.  The attachment is named viupd02.cpl, size 34k,
type application/octet-stream.  Apparently .cpl relates to the
"Windows Control Panel".

If it's a Bagel virus, they'll probably keep coming until the
owner of the infected machine finally notices.  Sometimes this
takes months.

Blocking by attachment type is one way to filter virus postings.
It may not get .zip attachments (since there's sometimes a
legitimate reason to attach a zip) but it can block most of
the other common virus payloads.

Obviously blocking common Windows mail user-agents doesn't touch
viruses, since viruses aren't using Outlook or whatever.  But I
think that suggestion was tongue in cheek anyway.

        ...Akkana
_______________________________________________
Gimp-user mailing list
Gimp-user@lists.xcf.berkeley.edu
http://lists.xcf.berkeley.edu/mailman/listinfo/gimp-user

Reply via email to