[lug] message from fschmid

[Barney Treadway]

That "good tool" looks exactly like the Klez virus.

my $.02

Barney

----- Original Message -----
From: "Arlan Ramsay" <ramsay at euclid.Colorado.EDU>
To: "Boulder Linux Users Group" <lug at lug.boulder.co.us>
Sent: Wednesday, June 26, 2002 2:32 PM
Subject: [lug] message from fschmid


>
> It is dated at around 3am Tuesday, and has strange attachments.
> It came to me as if from blug.  Is it a hoax, a virus attempt,
> or what?  There is an octet stream attachment, which I can forward
> if it is useful.  Did everyone on the list get this?
>
> Arlan Ramsay
>
> Here is the full header:
>
> >From fschmid at archenergy.com Wed Jun 26 09:19:21 2002
> Received: from community.tummy.com
>     (IDENT:87FAFAFdewC6aKo7zvgb4YmY7/GLPNcz at community.tummy.com
[66.54.152.73])
> by euclid.Colorado.EDU (8.10.1/8.10.1/UnixOps+Hesiod) with SMTP id
>     g5Q9cBI01537
> for <ramsay at euclid.colorado.edu>; Wed, 26 Jun 2002 03:38:11 -0600 (MDT)
> Date: Wed, 26 Jun 2002 03:38:11 -0600 (MDT)
> Message-Id: <200206260938.g5Q9cBI01537 at euclid.Colorado.EDU>
> Received: (qmail 29129 invoked by uid 0); 26 Jun 2002 09:38:06 -0000
> Received: from localhost (HELO community.tummy.com)
>     (?Pe0oomFqLOW8hxz4ZrrVSTpP0RK7ZIYG?@127.0.0.1)
>   by localhost with SMTP; 26 Jun 2002 09:38:05 -0000
> Delivered-To: mailman-lists.lug.boulder.co.us-lug at lists.lug.boulder.co.us
> Received: (qmail 29096 invoked by alias); 26 Jun 2002 09:37:44 -0000
> Delivered-To: alias-blug_dom-lug at lug.boulder.co.us
> Received: (qmail 29093 invoked by uid 0); 26 Jun 2002 09:37:44 -0000
> Received: from mu11.vnn.vn (203.162.0.46)
>   by community.tummy.com with SMTP; 26 Jun 2002 09:37:43 -0000
> Received: from Vyuumfke ([203.162.0.55]) by mu11.vnn.vn
>           (Netscape Messaging Server 4.15) with SMTP id GYB42W04.1CI for
>           <lug at lug.boulder.co.us>; Wed, 26 Jun 2002 16:37:44 +0700
> From: fschmid <fschmid at archenergy.com>
> To: lug at lug.boulder.co.us
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> boundary=KP9217G70579Uu281AwuZL07DKJ6F6
> Subject: [lug] A  good tool
> Sender: lug-admin at lug.boulder.co.us
> Errors-To: lug-admin at lug.boulder.co.us
> X-BeenThere: lug at lug.boulder.co.us
> X-Mailman-Version: 2.0.11
> Precedence: bulk
> Reply-To: lug at lug.boulder.co.us
> List-Help: <mailto:lug-request at lug.boulder.co.us?subject=help>
> List-Post: <mailto:lug at lug.boulder.co.us>
> List-Subscribe: <http://lists.lug.boulder.co.us/mailman/listinfo/lug>,
> <mailto:lug-request at lug.boulder.co.us?subject=subscribe>
> List-Id: Boulder (Colorado) Linux Users Group -- General Mailing List
>     <lug.lug.boulder.co.us>
> List-Unsubscribe: <http://lists.lug.boulder.co.us/mailman/listinfo/lug>,
> <mailto:lug-request at lug.boulder.co.us?subject=unsubscribe>
> List-Archive: <http://lists.lug.boulder.co.us/pipermail/lug/>
> Content-Length: 9498
>
>
>     [ Part 1, Text/PLAIN  6 lines. ]
>     [ Unable to print this part. ]
>
>
>     [ Part 2, Text/HTML  5 lines. ]
>     [ Unable to print this part. ]
>
>
>     [ Part 3, Text/PLAIN  5 lines. ]
>     [ Unable to print this part. ]
>
>
>     [ Part 5, Application/OCTET-STREAM (Name: "QPLS240USB")  8.2KB. ]
>     [ Unable to print this part. ]
>
>
>
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug
>