Please, my system antivirus has detected a worm (called Worm.Sobig) in a message here.
This is the sender information:

Received: from unknown (HELO VERWALTUNG?3) (212.152.243.206)
  by evanston.inter7.com with SMTP; 20 Aug 2003 10:05:46 -0000
From: <[EMAIL PROTECTED]>

--
Alejandro Ortega Paez <[EMAIL PROTECTED]>
--- Begin Message ---
Aviso para: System Anti-Virus Administrator.

[Este mensaje _no_ ha sido enviado al remitente, ya que parece ser una
lista de correo o haber sido generado de forma automática]

---------------------------------------



Se ha encontrado un virus en un mensaje remitido por Vd.
Este detector de virus lo ha interceptado antes de enviarlo a su
destinatario.

El virus encontrado ha sido:

Worm.Sobig.F


Por favor actualice su antivirus o contacte con su departamento de sistemas 
lo antes posible, ya que _su sistema_ parece estar infectado.


Su mensaje contenía como

MAIL FROM: [EMAIL PROTECTED]
RCPT TO:   [EMAIL PROTECTED] 

... con las siguientes cabeceras:

---
MAILFROM: [EMAIL PROTECTED]
Received: from unknown (HELO ns1.inter7.com) (209.218.8.2)
  by 0 with SMTP; 20 Aug 2003 08:57:22 -0000
Received: (qmail 7976 invoked by uid 511); 20 Aug 2003 10:06:11 -0000
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
List-Post: <mailto:[EMAIL PROTECTED]>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Unsubscribe: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <mailto:[EMAIL PROTECTED]>
Delivered-To: mailing list [EMAIL PROTECTED]
Received: from unknown (HELO VERWALTUNG?3) (212.152.243.206)
  by evanston.inter7.com with SMTP; 20 Aug 2003 10:05:46 -0000
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Date: Wed, 20 Aug 2003 10:52:43 +0200
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="_NextPart_000_00AE7716"
Subject: [vchkpw] Re: That movie


---



El mensaje original se mantiene en: 

  ns:/var/spool/qmailscan/quarantine

donde el Sr. System Anti-Virus Administrator podrá analizarlo.

El antivirus informó de lo siguiente cuando analizó el mensaje:

--- 

---clamscan results ---
/var/spool/qmailscan/ns10613698434267599/1061369872.7601-0.ns: OK
/var/spool/qmailscan/ns10613698434267599/application.pif: Worm.Sobig.F FOUND

---


--- End Message ---

Reply via email to