url: http://escribe.com/health/thesilverlist/m61934.html CS>Virus? From: M. G. Devour Date: Wed, 13 Aug 2003 05:02:26
>> Mike Monett wrote: >> P.S. Be on the lookout for viruses. I got another one from the >> list today, but my spam program kicked it out as usual. They >> won't run on my system, so I have no worries. But others may not >> be so lucky. > Did anybody see such a thing? I have had no indication of the list > server forwarding any dangerous attachments or other miscreants, > or even blocking any from being sent. > If, however, you received a message doctored to look like an old > list message, Mike, it was generated by another list member's > infected machine that happened to harvest such a message to use as > a disguise. There is no way for me to create a defense against > this since it all happens directly between the infected machine > and it's victims, not involving the list server at all. All > posters on any list are vulnerable to this kind of attack. > Also, some antivirus software will false trigger on some of the > harmless attachments that people send, like vcards and such. > I have some anti-virus provisions installed on the list server. > They are effective, so far, but could always be thwarted by > something unforeseen. > If you have real evidence of something getting through the list > server, let me know. If not, please don't needlessly cast > suspicion on the list itself. > Always have antivirus software running on your machine, everyone, > and keep it up to date. > Be well, > Mike Devour > silver-list owner Hi Mike, I think you do a very good job protecting members from these problems. I activated a new email address on Saturday, and the only place it is used is on the Silver List: [email protected] The email was sent directly to the new address and did not come from the list server. This is very similar to the last one I received from Gugli, who is completely fictitious. I'm attaching a copy of the header so you can see for yourself. I added brackets so nobody's browser will think it is a valid message. The header is badly forged, same as before. It is not MBlaster - that one is only about 6k, and this was more like 27k after decoding, same as before. It definitely is not related to the list server. My spam program quickly identifies these things and kicks them out, and they won't run on my system anyway. So I wouldn't worry about it if no one else has received one. Best Regards, Mike Monett -------------------------------------------------------------------- > From - Tue Aug 12 10:59:10 2003 > Received: from monkey.sneakemail.com ([207.106.87.13]) > by tomts7-srv.bellnexxia.net > (InterMail vM.5.01.05.32 201-253-122-126-132-20030307) with SMTP > id <20030812144541.cpt25058.tomts7-srv.bellnexxia....@monkey.sneakemail.com> > Tue, 12 Aug 2003 10:45:41 -0400 > Received: (qmail 20222 invoked by uid 501); 12 Aug 2003 14:45:39 -0000 > Message-ID: <[email protected]> > Received: from sccrmhc11.comcast.net (HELO sccrmhc11.comcast.net) (204.127.202.55) > by mail.sneakemail.com with SMTP; 12 Aug 2003 14:45:36 -0000 > Date: Tue, 12 Aug 2003 14:45:12 +0000 (GMT) > X-Comment: Sending client does not conform to RFC822 minimum requirements > X-Comment: Date has been added by Maillennium > Received: from your-w92p4bhlzg (c-24-118-7-223.mn.client2.attbi.com[24.118.7.223](untrusted sender)) > by comcast.net (sccrmhc11) with SMTP > id <2003081214450401100ca4p6e>; Tue, 12 Aug 2003 14:45:11 +0000 > From: "Espen groupmaster-at-industryinet.com |silver2|" <[email protected]> > Subject: Re: [cancercured] Re: The Pathology Guy > MIME-Version: 1.0 > Content-Type: multipart/alternative; boundary="----------0PW4GZZ2N9J7HSW" > X-Sneakemail-Address: [email protected] > X-Sneakemail-Rcpt: [email protected] > X-Sneakemail-Keyword: > X-Sneakemail-Return-Path: [email protected] > X-Sneakemail-From: Espen <[email protected]> > X-Sneakemail-Is-Sneakemail: yes > X-Sneakemail-Folder-Path: Desktop > X-Sneakemail-Inc-Phrase: > X-Mozilla-Status: 0011 > ------------0PW4GZZ2N9J7HSW > Content-Type: text/html; > Content-Transfer-Encoding: quoted-printable > <HTML><HEAD></HEAD><BODY> > <iframe src=3Dcid:47MBiVaTqI3za height=3D0 width=3D0> > </iframe> > <FONT></FONT> > Read response to the pathguy on this forum:<br> > <br> > <m.htm>Liver stones or just some formations of oil mixed with body <br> > .. justmarvin 05:29 May 06 2002<br> > http://curezone.com/forums/m.asp?fs&iP8<br> > http://curezone.com/forums/m.asp?fs&iQ0<br> > http://curezone.com/forums/m.asp?fs&iQ1<br> > <br> > <br> > Read also this:<br> > <m.htm>Dyeing to know the answer Andy 17:40 Oct 13<br> > http://curezone.com/forums/m.asp?fs&i84<br> > <br> > <br> > Lab documentation of stones<br> > <br> > http://curezone.com/forums/m.asp?fs&i=3D4 > </BODY></HTML> > ------------0PW4GZZ2N9J7HSW > Content-Type: audio/x-midi; name=Fwd_ .eml.pif > Content-Transfer-Encoding: base64 > Content-ID: <47MBiVaTqI3za> > TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAA > AAAAAAAAAAAAAAAAAAAA2AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFt > IGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGUuDQ0KJAAAAAAAAACPY1NsywI9 > P8sCPT/LAj0/sB4xP88CPT9IHjM/yQI9PyMdNz/eAj0/Ix05P8kCPT+pHS4/ > wAI9P8sCPD9xAj0/Ix02P9sCPT9SaWNoywI9PwAAAAAAAAAAUEUAAEwBAwBv > bin8AAAAAAAAAADgAA4BCwEGAAAgAQAAEAAAAOAGACABCAAA8AYAABAIAAAA > QAAAEAAAAAIAAAQAAAAAAAAABAAAAAAAAAAAIAgAABAAAAAAAAACAAAAAAAQ -- The silver-list is a moderated forum for discussion of colloidal silver. Instructions for unsubscribing may be found at: http://silverlist.org To post, address your message to: [email protected] Silver-list archive: http://escribe.com/health/thesilverlist/index.html List maintainer: Mike Devour <[email protected]>
