Re: [Biofuel] Keith I think you have a virus.....Do not open body.zip

2005-10-14 Thread Keith Addison
Hallo Chip

>Keith Addison wrote:
> >>Hello Joe and all.
> >>My antivirus AVG from Grisoft detected the same virus inside an attached
> >>file with the name body.zip and it sended that message to a virus vault
> >>were I already deleted. I noticed it took the biofuel list addresses.
> >>I do not think the address is the real because virus tend to use somebody
> >>else's address to hide its real server.
> >
> >
> > Hello Juan
> >
> > It didn't come via the Biofuel list server either. They leave a 
>false trail.
>
>E, ummm,
>
>I think it in fact did come via the biofuel list server.
>
>I get my list traffic off a server that I administer, and
>hence have access to the maillogs, and I keep verbose
>logs.
>
>The message with the attachment, and there was an attachment,
>originated from 70.85.95.186, and that IP address I have a
>pretty high degree of confidence isn't spoofed, as it's
>TLS signature is good. It's the same box that has
>sent all my other biofuel list traffic. Of that I am
>pretty confident. Absolutely? No. a packets just
>a packet.

Here's the archives version:

>http://sustainablelists.org/pipermail/biofuel_sustainablelists.org/20 
>05-October/005957.html
>[Biofuel] Server Report
>
>[EMAIL PROTECTED] keith at journeytoforever.org
>Fri Oct 14 04:04:11 EDT 2005
>
>The message contains Unicode characters and has been sent as a 
>binary attachment.
>
>-- next part --
>A non-text attachment was scrubbed...
>Name: body.zip
>Type: application/octet-stream
>Size: 50290 bytes
>Desc: not available
>Url : 
>http://sustainablelists.org/pipermail/biofuel_sustainablelists.org/att 
>achments/20051014/db127131/body.obj

Best

Keith


___
Biofuel mailing list
Biofuel@sustainablelists.org
http://sustainablelists.org/mailman/listinfo/biofuel_sustainablelists.org

Biofuel at Journey to Forever:
http://journeytoforever.org/biofuel.html

Search the combined Biofuel and Biofuels-biz list archives (50,000 messages):
http://www.mail-archive.com/biofuel@sustainablelists.org/



Re: [Biofuel] Keith I think you have a virus.....Do not open body.zip

2005-10-14 Thread Chip Mefford
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Keith Addison wrote:
>>Hello Joe and all.
>>My antivirus AVG from Grisoft detected the same virus inside an attached
>>file with the name body.zip and it sended that message to a virus vault
>>were I already deleted. I noticed it took the biofuel list addresses.
>>I do not think the address is the real because virus tend to use somebody
>>else's address to hide its real server.
> 
> 
> Hello Juan
> 
> It didn't come via the Biofuel list server either. They leave a false trail.

E, ummm,

I think it in fact did come via the biofuel list server.

I get my list traffic off a server that I administer, and
hence have access to the maillogs, and I keep verbose
logs.

The message with the attachment, and there was an attachment,
originated from 70.85.95.186, and that IP address I have a
pretty high degree of confidence isn't spoofed, as it's
TLS signature is good. It's the same box that has
sent all my other biofuel list traffic. Of that I am
pretty confident. Absolutely? No. a packets just
a packet.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFDUAlf0STXFHxUucwRAs2tAKCT90FBZmev3AXESrfdVA+Scjqb8wCcCV+C
bSNc+84p83+4LTc9xVvFgJM=
=JmTY
-END PGP SIGNATURE-

___
Biofuel mailing list
Biofuel@sustainablelists.org
http://sustainablelists.org/mailman/listinfo/biofuel_sustainablelists.org

Biofuel at Journey to Forever:
http://journeytoforever.org/biofuel.html

Search the combined Biofuel and Biofuels-biz list archives (50,000 messages):
http://www.mail-archive.com/biofuel@sustainablelists.org/



Re: [Biofuel] Keith I think you have a virus.....Do not open body.zip

2005-10-14 Thread Keith Addison
>Hello Joe and all.
>My antivirus AVG from Grisoft detected the same virus inside an attached
>file with the name body.zip and it sended that message to a virus vault
>were I already deleted. I noticed it took the biofuel list addresses.
>I do not think the address is the real because virus tend to use somebody
>else's address to hide its real server.

Hello Juan

It didn't come via the Biofuel list server either. They leave a false trail.

Best wishes

Keith



>Regards.
>Juan
>Paraguay
>-Mensaje original-
>De:Joe Street [SMTP:[EMAIL PROTECTED]
>Enviado el:Viernes 14 de Octubre de 2005 8:50 AM
>Para:  Biofuel@sustainablelists.org
>Asunto:[Biofuel] Keith I think you have a virus.
>
>
>Hi Keith;
>
>I got the following warning form symantec about a message I recieved
>from you.  Was this message in response to the email I sent last week
>regarding the new biodiesel process?
>
>Joe
>
>[EMAIL PROTECTED] wrote:
>
> >Symantec AntiVirus found a virus in an attachment from
>[EMAIL PROTECTED]
> >
> >
> >Attachment:  body.zip
> >Threat: [EMAIL PROTECTED]
> >Action taken:  Quarantine succeeded
> >File status:  Infected
> >
> >
> >The message contains Unicode characters and has been sent as a binary
>attachment.


___
Biofuel mailing list
Biofuel@sustainablelists.org
http://sustainablelists.org/mailman/listinfo/biofuel_sustainablelists.org

Biofuel at Journey to Forever:
http://journeytoforever.org/biofuel.html

Search the combined Biofuel and Biofuels-biz list archives (50,000 messages):
http://www.mail-archive.com/biofuel@sustainablelists.org/



Re: [Biofuel] Keith I think you have a virus.....Do not open body.zip

2005-10-14 Thread Brian Rodgers
Yeah I don't think the list sends out any attachments. This is a good thing.
Brian Rodgers

___
Biofuel mailing list
Biofuel@sustainablelists.org
http://sustainablelists.org/mailman/listinfo/biofuel_sustainablelists.org

Biofuel at Journey to Forever:
http://journeytoforever.org/biofuel.html

Search the combined Biofuel and Biofuels-biz list archives (50,000 messages):
http://www.mail-archive.com/biofuel@sustainablelists.org/



Re: [Biofuel] Keith I think you have a virus.....Do not open body.zip

2005-10-14 Thread Juan Boveda
Hello Joe and all.
My antivirus AVG from Grisoft detected the same virus inside an attached 
file with the name body.zip and it sended that message to a virus vault 
were I already deleted. I noticed it took the biofuel list addresses.
I do not think the address is the real because virus tend to use somebody 
else's address to hide its real server.
Regards.
Juan
Paraguay
-Mensaje original-
De: Joe Street [SMTP:[EMAIL PROTECTED]
Enviado el: Viernes 14 de Octubre de 2005 8:50 AM
Para:   Biofuel@sustainablelists.org
Asunto: [Biofuel] Keith I think you have a virus.


Hi Keith;

I got the following warning form symantec about a message I recieved
from you.  Was this message in response to the email I sent last week
regarding the new biodiesel process?

Joe

[EMAIL PROTECTED] wrote:

>Symantec AntiVirus found a virus in an attachment from 
[EMAIL PROTECTED]
>
>
>Attachment:  body.zip
>Threat: [EMAIL PROTECTED]
>Action taken:  Quarantine succeeded
>File status:  Infected
>
>
>The message contains Unicode characters and has been sent as a binary 
attachment.
>
>
>


___
Biofuel mailing list
Biofuel@sustainablelists.org
http://sustainablelists.org/mailman/listinfo/biofuel_sustainablelists.org

Biofuel at Journey to Forever:
http://journeytoforever.org/biofuel.html

Search the combined Biofuel and Biofuels-biz list archives (50,000 messages):
http://www.mail-archive.com/biofuel@sustainablelists.org/