It was probably put there by our BWMA friends.... Mike Perth
----- Original Message ----- From: "Jim Elwell" <[EMAIL PROTECTED]> To: "U.S. Metric Association" <[EMAIL PROTECTED]> Sent: Wednesday, August 14, 2002 12:34 AM Subject: [USMA:21700] Fwd: Re: VIRUS (Exploit-MIME.gen) FROM <[EMAIL PROTECTED]> | FYI -- Joe, please pay particular attention. | | Jim | | | >Delivered-To: [EMAIL PROTECTED] | >Date: Tue, 13 Aug 2002 09:59:49 -0600 (MDT) | >From: Bill Bentley <[EMAIL PROTECTED]> | >To: Jim Elwell <[EMAIL PROTECTED]> | >Subject: Re: VIRUS (Exploit-MIME.gen) FROM <[EMAIL PROTECTED]> | >X-Virus-Scanned: by amavisd-new amavisd-new-20020630 | >X-Razor-id: e78f9bc18054e7c72f58a35d1d1fef007c16e8e3 | > | >It looks like someone on the USMA mailing list is propagating something | >nasty (probably unwittingly). The mail virus scanner detected | >"Exploit-MIME.gen" in an e-mail apparently from "[EMAIL PROTECTED]". The | >scanning software dumped the message as it is supposed to, and sent me the | >warning below. | > | >You may want to let people know on the list, since it's a good chance that | >most don't virus scan their e-mail. | > | >CYAL8R | > | > | > | >On Tue, 13 Aug 2002 [EMAIL PROTECTED] wrote: | > | > > A virus (Exploit-MIME.gen) was found in an email from: | > > [EMAIL PROTECTED] | > > | > > | > > The message was addressed to: | > > -> [EMAIL PROTECTED] | > > | > > Scanner output: | > > Scanning /var/amavis/amavis-20020813T090106-03602/parts/* | > > Scanning file /var/amavis/amavis-20020813T090106-03602/parts/part-00001 | > > /var/amavis/amavis-20020813T090106-03602/parts/part-00001 | > > Found the Exploit-MIME.gen virus !!! | > > | > > Summary report on /var/amavis/amavis-20020813T090106-03602/parts/* | > > File(s) | > > Total files: ........... 1 | > > Clean: ................. 0 | > > Possibly Infected: ..... 1 | > > | > > Not quarantined. | > > | > > ------------------------- BEGIN HEADERS ----------------------------- | > > Return-Path: <[EMAIL PROTECTED]> | > > Received: from simla.ColoState.EDU (simla.colostate.edu [129.82.103.72]) | > > by hermod.qsicorp.com (Postfix) with ESMTP id 3564017087 | > > for <[EMAIL PROTECTED]>; Tue, 13 Aug 2002 09:14:47 -0600 (MDT) | > > Received: from yuma.acns.ColoState.EDU (yuma.acns.colostate.edu | > [129.82.100.64]) | > > by simla.ColoState.EDU (AIX4.3/8.9.3/8.9.3) with ESMTP id JAA132344; | > > Tue, 13 Aug 2002 09:14:21 -0600 | > > Received: from localhost (localhost [127.0.0.1]) by | > yuma.acns.ColoState.EDU (AIX4.3/8.9.3/8.8.8) with SMTP id JAA32646; Tue, | > 13 Aug 2002 09:12:48 -0600 | > > Precedence: bulk | > > Received: from lamar.ColoState.EDU (lamar.acns.colostate.edu | > [129.82.100.75]) by yuma.acns.ColoState.EDU (AIX4.3/8.9.3/8.8.8) with | > ESMTP id JAA144078 for <[EMAIL PROTECTED]>; Tue, 13 Aug 2002 | > 09:12:34 -0600 | > > Received: from app5.nasc.inter.net (clueponbook.nasc.inter.net | > [203.176.60.253]) by lamar.ColoState.EDU (AIX4.3/8.9.3/8.8.8) with ESMTP | > id JAA656094 for <[EMAIL PROTECTED]>; Tue, 13 Aug 2002 09:12:33 -0600 | > > Received: from ip4-243.eyrkonaeac12.dialup.ca.telus.com ([209.29.173.243]) | > > by app5.nasc.inter.net with smtp (Exim 3.34 #1) | > > id 17edLT-00016H-00 | > > for [EMAIL PROTECTED]; Tue, 13 Aug 2002 11:12:32 -0400 | > > Message-Id: <v01510101b97ec5d9409d@[209.29.85.50]> | > > Mime-Version: 1.0 | > > Content-Type: text/plain; charset="iso-8859-1" | > > Content-Transfer-Encoding: quoted-printable | > > Date: Tue, 13 Aug 2002 11:12:29 -0400 | > > To: "U.S. Metric Association" <[EMAIL PROTECTED]> | > > From: [EMAIL PROTECTED] (Joseph B. Reid) | > > Subject: [USMA:21695] Re: Gram is the basic unit of mass and is used to | > > Reply-To: [EMAIL PROTECTED] | > > Sender: [EMAIL PROTECTED] | > > X-Listprocessor-Version: 8.2.09/991022/14:20 -- ListProc(tm) by CREN | > > -------------------------- END HEADERS ------------------------------ | > | >---- | >Bill Bentley - Network Administrator, QSI Corporation (www.qsicorp.com) | >"I'm the sysadmin. If you see me running, save your work." | |
