[lug] message from fschmid
Barney Treadway
barney at treadways.org
Wed Jun 26 14:46:39 MDT 2002
That "good tool" looks exactly like the Klez virus.
my $.02
Barney
----- Original Message -----
From: "Arlan Ramsay" <ramsay at euclid.Colorado.EDU>
To: "Boulder Linux Users Group" <lug at lug.boulder.co.us>
Sent: Wednesday, June 26, 2002 2:32 PM
Subject: [lug] message from fschmid
>
> It is dated at around 3am Tuesday, and has strange attachments.
> It came to me as if from blug. Is it a hoax, a virus attempt,
> or what? There is an octet stream attachment, which I can forward
> if it is useful. Did everyone on the list get this?
>
> Arlan Ramsay
>
> Here is the full header:
>
> >From fschmid at archenergy.com Wed Jun 26 09:19:21 2002
> Received: from community.tummy.com
> (IDENT:87FAFAFdewC6aKo7zvgb4YmY7/GLPNcz at community.tummy.com
[66.54.152.73])
> by euclid.Colorado.EDU (8.10.1/8.10.1/UnixOps+Hesiod) with SMTP id
> g5Q9cBI01537
> for <ramsay at euclid.colorado.edu>; Wed, 26 Jun 2002 03:38:11 -0600 (MDT)
> Date: Wed, 26 Jun 2002 03:38:11 -0600 (MDT)
> Message-Id: <200206260938.g5Q9cBI01537 at euclid.Colorado.EDU>
> Received: (qmail 29129 invoked by uid 0); 26 Jun 2002 09:38:06 -0000
> Received: from localhost (HELO community.tummy.com)
> (?Pe0oomFqLOW8hxz4ZrrVSTpP0RK7ZIYG?@127.0.0.1)
> by localhost with SMTP; 26 Jun 2002 09:38:05 -0000
> Delivered-To: mailman-lists.lug.boulder.co.us-lug at lists.lug.boulder.co.us
> Received: (qmail 29096 invoked by alias); 26 Jun 2002 09:37:44 -0000
> Delivered-To: alias-blug_dom-lug at lug.boulder.co.us
> Received: (qmail 29093 invoked by uid 0); 26 Jun 2002 09:37:44 -0000
> Received: from mu11.vnn.vn (203.162.0.46)
> by community.tummy.com with SMTP; 26 Jun 2002 09:37:43 -0000
> Received: from Vyuumfke ([203.162.0.55]) by mu11.vnn.vn
> (Netscape Messaging Server 4.15) with SMTP id GYB42W04.1CI for
> <lug at lug.boulder.co.us>; Wed, 26 Jun 2002 16:37:44 +0700
> From: fschmid <fschmid at archenergy.com>
> To: lug at lug.boulder.co.us
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> boundary=KP9217G70579Uu281AwuZL07DKJ6F6
> Subject: [lug] A good tool
> Sender: lug-admin at lug.boulder.co.us
> Errors-To: lug-admin at lug.boulder.co.us
> X-BeenThere: lug at lug.boulder.co.us
> X-Mailman-Version: 2.0.11
> Precedence: bulk
> Reply-To: lug at lug.boulder.co.us
> List-Help: <mailto:lug-request at lug.boulder.co.us?subject=help>
> List-Post: <mailto:lug at lug.boulder.co.us>
> List-Subscribe: <http://lists.lug.boulder.co.us/mailman/listinfo/lug>,
> <mailto:lug-request at lug.boulder.co.us?subject=subscribe>
> List-Id: Boulder (Colorado) Linux Users Group -- General Mailing List
> <lug.lug.boulder.co.us>
> List-Unsubscribe: <http://lists.lug.boulder.co.us/mailman/listinfo/lug>,
> <mailto:lug-request at lug.boulder.co.us?subject=unsubscribe>
> List-Archive: <http://lists.lug.boulder.co.us/pipermail/lug/>
> Content-Length: 9498
>
>
> [ Part 1, Text/PLAIN 6 lines. ]
> [ Unable to print this part. ]
>
>
> [ Part 2, Text/HTML 5 lines. ]
> [ Unable to print this part. ]
>
>
> [ Part 3, Text/PLAIN 5 lines. ]
> [ Unable to print this part. ]
>
>
> [ Part 5, Application/OCTET-STREAM (Name: "QPLS240USB") 8.2KB. ]
> [ Unable to print this part. ]
>
>
>
> _______________________________________________
> Web Page: http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug
>
More information about the LUG
mailing list