On Sat, 26 Jul 2003 21:44:08 -0500
MKlinke <[EMAIL PROTECTED]> wrote:
> On Saturday 26 July 2003 19:10, Tom Pollerman wrote:
> > Hello,
> > I just received the e-mail below. The file attachment scans
> > positive for the Bugbear virus by F-prot.
> >
> > /root/Mail/inbox/448->emails.doc.pif Infection: W32/[EMAIL PROTECTED]
> >
> > I've sent a message about it to Nick White.
> >
> > You may want to look for it.
> >
> > Best,
> >
> > Tom
> >
> >
> > -----------snip--------------------------
> > Received: from cassia.ciblis.net [200.246.108.2] by
> > mail.landolls.com
> > (SMTPD32-6.06) id AA6DCB30242; Sat, 26 Jul 2003 18:02:21 -0400
> > Received: (qmail 5033 invoked by uid 509); 26 Jul 2003 22:01:22
> > -0000 Received: from ap163.ciblis.net (HELO o0d9q9)
> > (200.246.108.163)
> > by 0 with SMTP; 26 Jul 2003 22:01:22 -0000
> > From: "Nick White" <[EMAIL PROTECTED]>
> > Subject: RE: pop3s / Outlook
> > MIME-Version: 1.0
> > Content-Type: multipart/mixed; boundary="----------8CRN4GAJL2Y3KJ"
> > Message-Id: <[EMAIL PROTECTED]>
> > X-Note: This E-mail was scanned by Declude JunkMail
> > (www.declude.com) for spam.
> > X-RCPT-TO: <[EMAIL PROTECTED]>
> > Date: Sat, 26 Jul 2003 18:02:26 -0400
> > X-UIDL: 43568
> > Status: U
>
> Tom,
>
> Unless there's something you left out this doesn't appear to have
> come from Nick White. It originated on cassia.ciblis.net not in
> Nick's Domain gmx.de and since Bugbear spoofs the from: address it
> almost certainly didn't come from Nick White.
>
I understand that, and posted to his real address,"Nick White"
<[EMAIL PROTECTED]>, which I got from his original post to the List.
I mainly wanted to make other List members aware of the fact that a
'List-related' e-mail may be lurking in their mailbox which looks as
though it came from a List member. Someone new to RedHat-List using a
Windows client without virus protection may inadvertently look at the
attachment.
I once helped a member of the Guinness-List (RH7.0) get a sound card
going. Most of our exchanges were 'off-list' as he was new to Linux,
and unfamiliar about even basic commands. Within a week or so, I was
getting complaints from stangers that "I" was sending them e-mail
viruses. One even got as far as the Guinnes-List, but RedHat had
'disinfected' it by then.
Likely, the guy I was helping with the sound card had his addresses
hijacked, and some nasty stuff was being sent out in my name.
Nick may be in a similar situation, and can pass on the alert.
Regards,
Tom
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list
