FYI -- Joe, please pay particular attention. Jim
>Delivered-To: [EMAIL PROTECTED] >Date: Tue, 13 Aug 2002 09:59:49 -0600 (MDT) >From: Bill Bentley <[EMAIL PROTECTED]> >To: Jim Elwell <[EMAIL PROTECTED]> >Subject: Re: VIRUS (Exploit-MIME.gen) FROM <[EMAIL PROTECTED]> >X-Virus-Scanned: by amavisd-new amavisd-new-20020630 >X-Razor-id: e78f9bc18054e7c72f58a35d1d1fef007c16e8e3 > >It looks like someone on the USMA mailing list is propagating something >nasty (probably unwittingly). The mail virus scanner detected >"Exploit-MIME.gen" in an e-mail apparently from "[EMAIL PROTECTED]". The >scanning software dumped the message as it is supposed to, and sent me the >warning below. > >You may want to let people know on the list, since it's a good chance that >most don't virus scan their e-mail. > >CYAL8R > > > >On Tue, 13 Aug 2002 [EMAIL PROTECTED] wrote: > > > A virus (Exploit-MIME.gen) was found in an email from: > > [EMAIL PROTECTED] > > > > > > The message was addressed to: > > -> [EMAIL PROTECTED] > > > > Scanner output: > > Scanning /var/amavis/amavis-20020813T090106-03602/parts/* > > Scanning file /var/amavis/amavis-20020813T090106-03602/parts/part-00001 > > /var/amavis/amavis-20020813T090106-03602/parts/part-00001 > > Found the Exploit-MIME.gen virus !!! > > > > Summary report on /var/amavis/amavis-20020813T090106-03602/parts/* > > File(s) > > Total files: ........... 1 > > Clean: ................. 0 > > Possibly Infected: ..... 1 > > > > Not quarantined. > > > > ------------------------- BEGIN HEADERS ----------------------------- > > Return-Path: <[EMAIL PROTECTED]> > > Received: from simla.ColoState.EDU (simla.colostate.edu [129.82.103.72]) > > by hermod.qsicorp.com (Postfix) with ESMTP id 3564017087 > > for <[EMAIL PROTECTED]>; Tue, 13 Aug 2002 09:14:47 -0600 (MDT) > > Received: from yuma.acns.ColoState.EDU (yuma.acns.colostate.edu > [129.82.100.64]) > > by simla.ColoState.EDU (AIX4.3/8.9.3/8.9.3) with ESMTP id JAA132344; > > Tue, 13 Aug 2002 09:14:21 -0600 > > Received: from localhost (localhost [127.0.0.1]) by > yuma.acns.ColoState.EDU (AIX4.3/8.9.3/8.8.8) with SMTP id JAA32646; Tue, > 13 Aug 2002 09:12:48 -0600 > > Precedence: bulk > > Received: from lamar.ColoState.EDU (lamar.acns.colostate.edu > [129.82.100.75]) by yuma.acns.ColoState.EDU (AIX4.3/8.9.3/8.8.8) with > ESMTP id JAA144078 for <[EMAIL PROTECTED]>; Tue, 13 Aug 2002 > 09:12:34 -0600 > > Received: from app5.nasc.inter.net (clueponbook.nasc.inter.net > [203.176.60.253]) by lamar.ColoState.EDU (AIX4.3/8.9.3/8.8.8) with ESMTP > id JAA656094 for <[EMAIL PROTECTED]>; Tue, 13 Aug 2002 09:12:33 -0600 > > Received: from ip4-243.eyrkonaeac12.dialup.ca.telus.com ([209.29.173.243]) > > by app5.nasc.inter.net with smtp (Exim 3.34 #1) > > id 17edLT-00016H-00 > > for [EMAIL PROTECTED]; Tue, 13 Aug 2002 11:12:32 -0400 > > Message-Id: <v01510101b97ec5d9409d@[209.29.85.50]> > > Mime-Version: 1.0 > > Content-Type: text/plain; charset="iso-8859-1" > > Content-Transfer-Encoding: quoted-printable > > Date: Tue, 13 Aug 2002 11:12:29 -0400 > > To: "U.S. Metric Association" <[EMAIL PROTECTED]> > > From: [EMAIL PROTECTED] (Joseph B. Reid) > > Subject: [USMA:21695] Re: Gram is the basic unit of mass and is used to > > Reply-To: [EMAIL PROTECTED] > > Sender: [EMAIL PROTECTED] > > X-Listprocessor-Version: 8.2.09/991022/14:20 -- ListProc(tm) by CREN > > -------------------------- END HEADERS ------------------------------ > >---- >Bill Bentley - Network Administrator, QSI Corporation (www.qsicorp.com) >"I'm the sysadmin. If you see me running, save your work."
