On Saturday 26 July 2003 19:10, Tom Pollerman wrote:
> Hello,
>       I just received the e-mail below. The file attachment scans
> positive for the Bugbear virus by F-prot.
>
> /root/Mail/inbox/448->emails.doc.pif  Infection: W32/[EMAIL PROTECTED]
>
> I've sent a message about it to Nick White.
>
> You may want to look for it.
>
>                                       Best,
>
>                                       Tom
>
>
> -----------snip--------------------------
> Received: from cassia.ciblis.net [200.246.108.2] by mail.landolls.com
>   (SMTPD32-6.06) id AA6DCB30242; Sat, 26 Jul 2003 18:02:21 -0400
> Received: (qmail 5033 invoked by uid 509); 26 Jul 2003 22:01:22 -0000
> Received: from ap163.ciblis.net (HELO o0d9q9) (200.246.108.163)
>   by 0 with SMTP; 26 Jul 2003 22:01:22 -0000
> From:  "Nick White" <[EMAIL PROTECTED]>
> Subject:  RE: pop3s / Outlook
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="----------8CRN4GAJL2Y3KJ"
> Message-Id: <[EMAIL PROTECTED]>
> X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com)
> for spam.
> X-RCPT-TO: <[EMAIL PROTECTED]>
> Date: Sat, 26 Jul 2003 18:02:26 -0400
> X-UIDL: 43568
> Status: U

Tom,

Unless there's something you left out this doesn't appear to have come 
from Nick White.  It originated on cassia.ciblis.net not in Nick's 
Domain gmx.de and since Bugbear spoofs the from: address it almost 
certainly didn't come from Nick White.

Regards,  Mike Klinke
 


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to