Re: possible virus
On Sat, 15 May 2004 20:01:33 +0100, arden wrote: >Ive just received an e-mail claiming to be from Microsoft telling me >torun the attached patch It's a known worm. Look at the headers and you can clearly see that it's not from Microsoft. This is why I have mutt and Evolution configured to always show all headers. If you're bored, try running it under wine, though I wouldn't do that on a production system. =) -- I abhor a system designed for the "user", if that word is a coded pejorative meaning "stupid and unsophisticated". -- Ken Thompson - Unix is user friendly. However, it isn't idiot friendly. - Please CC me in all replies, even if I'm on the relevant list(s). pgpwvwwzIMoFw.pgp Description: PGP signature
Re: Possible Virus
On Sunday, May 16, 2004 5:04:50 AM arden <[EMAIL PROTECTED]> wrote: |>Date: Sat, 15 May 2004 20:01:33 +0100 |>From: arden <[EMAIL PROTECTED]> |>Subject: possible virus |>To: York Linux Users Group <[EMAIL PROTECTED]> |>Cc: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> |>Message-ID: <[EMAIL PROTECTED]> |>Content-Type: text/plain |> |>hi all |> |>Ive just received an e-mail claiming to be from Microsoft telling me to |>run the attached patch |> |>which must be bogus since I've never registered with m$ and don't |>connect to the net with any Microsoft operating systems |> |>May-be one for sysadmin people to look for |> |>Arden ** Reply Separator ** Sunday, May 16, 2004 8:17:38 AM It is totally false. Microsoft never sends out emails with patches for it's software. In addition, they usually include a PGP key. You could try running the email through SPAM COP, but it is probably not worth the effort. BTW, are you running any AV software? If so, and assuming it is current, it should have detected any attached virus or Trojan horse paraphernalia. -- Gerard Seibert [EMAIL PROTECTED] You cannot do a kindness too soon, for you never know how soon it will be too late. - Ralph Waldo Emerson ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
possible virus
hi all Ive just received an e-mail claiming to be from Microsoft telling me to run the attached patch which must be bogus since I've never registered with m$ and don't connect to the net with any Microsoft operating systems May-be one for sysadmin people to look for Arden ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Warning: A possible virus has been detected in one of your messages.
A virus or an infected file has been detected in a message: From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Protected Mail System Messages containing infected attachments will no longer be forwarded. If you wish to send emails with attachment, we strongly recommend that you enclose your attachment in formats like .ZIP. This is the size of the email in question: -rw---1 root mail41543 Apr 23 10:08 msg.ktcI This is what our filter said about the issue: - X-Procmail-AV: Probably a NetSky.P/Q/C or similar virus detected. - These filenames were found in the message: "pgp_sess01.zip" Content-Disposition: attachment; If you want this mail anyway, please click here: mailto:[EMAIL PROTECTED]/msg.ktcI Should that fail, click here in stead: mailto:[EMAIL PROTECTED] __ RECIPIENT: __ You are our customer, therefore we did this effort to protect you from viruses. If you do not want the antivirus scanning for your emails, please click here: mailto:[EMAIL PROTECTED] otherwise no action is required on your part. A copy of this message has been delivered to the sender. __ SENDER: __ Please update your virus detection software and clean your system before attempting to resend this message. If you are one of our customers, we suggest that you use our WebMail system at: http://YOURDOMAIN/webmail ** Regards, AntiVirus System [EMAIL PROTECTED] [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
