A Bat-fellow, Peter Meyns,
wrote on Sunday, 7th September 2003 at 17:16:22 (GMT +0200),
which was ditto in Bratislava --

PM> Hi Avenarius,

PM> on Sun,  7 Sep 2003 17:02:33 +0200GMT (07.09.03, 17:02 +0200GMT here),
PM> you wrote in mid:[EMAIL PROTECTED] :

A>> S P A M    A L E R T !

A>> Email has been identified as spam !!! Message was deleted.
A>> Vami zaslana zprava byla vyhodnocena jako spam !!! Zprava byla smazana.

PM> Avenarius, please check your spam filter!



Those messages do not come from me, although my name & email address
are in the headers. TBUDL is the second mailing list today affected by
this -- virus?

I exclusively use The Bat! for posting, but as you can see in the
headers of the two fake posts:

> X-Mailer: <SMTP32 v20010131>

I've no idea what that is and I've never used it. And, there are no
spam filters set up anywhere on my system.

This sure is interesting, as the virus/worm has even managed to pick
up a message-id that *appears* as if it could come from myself.
However, the message-IDs produced by The Bat! are very differently
structured. Here is one from a genuine post I sent earlier today:
     Message-Id: <[EMAIL PROTECTED]>

The fake ID goes (as you quoted it):
     Message-Id: <[EMAIL PROTECTED]>

Another interesting aspect is that the second line of the fake message
is in the Czech language (and says the same thing as the English line
above it). I am in Slovakia, however, and I use a Slovak, not a Czech
anti-virus product: NOD32. (This has been a longstanding Czecho-Slovak
rivalry: AVG vs. NOD.)

I'd be intrigued to hear anyone's comments on this affair (on TBOT, of
course) in case you've encountered something similar before.

-- 
Yours,
Alex. of Slovakia
www.avenarius.sk

[flying with The Bat! 2.00
under Windows 98 4.10 Build 2222 A 
amd k6-2 500 mhz processor with 128 mb ram]


________________________________________________
Current version is 2.00 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to