* Returned mail: see transcript for details
@ 2003-09-04 5:11 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-09-04 5:11 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 203 bytes --]
****************** Virus Warning Message (on the network)
Found virus WORM_SOBIG.F in file your_document.pif
The uncleanable file is deleted.
*********************************************************
[-- Attachment #2: Type: text/plain, Size: 516 bytes --]
The original message was received at Wed, 3 Sep 2003 22:11:30 -0700 (PDT)
from [61.51.255.139]
----- The following addresses had permanent fatal errors -----
<fred-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>
(reason: 552 5.0.0 SOBIG.F Virus outbreak - temp fix)
(expanded from: <fred-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>)
----- Transcript of session follows -----
... while talking to ams-msg-core-1.cisco.com.:
>>> DATA
<<< 552 5.0.0 SOBIG.F Virus outbreak - temp fix
554 5.0.0 Service unavailable
[-- Attachment #3: Type: message/delivery-status, Size: 476 bytes --]
[-- Attachment #4: Type: message/rfc822, Size: 1279 bytes --]
[-- Attachment #4.1.1: Type: text/plain, Size: 41 bytes --]
Please see the attached file for details.
[-- Attachment #4.1.2: Type: text/plain, Size: 187 bytes --]
****************** Virus Warning Message (on the network)
your_document.pif is removed from here because it contains a virus.
*********************************************************
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-09-07 7:51 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-09-07 7:51 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 203 bytes --]
------------------ Virus Warning Message (on the network)
Found virus WORM_SOBIG.F in file your_document.pif
The uncleanable file is deleted.
---------------------------------------------------------
[-- Attachment #2: Type: text/plain, Size: 558 bytes --]
The original message was received at Sun, 7 Sep 2003 00:51:08 -0700 (PDT)
from [211.238.197.214]
----- The following addresses had permanent fatal errors -----
<fred-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>
(reason: 552 5.0.0 SOBIG.F Virus outbreak - temp fix - change your subject)
(expanded from: <fred-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>)
----- Transcript of session follows -----
... while talking to rtp-core-1.cisco.com.:
>>> DATA
<<< 552 5.0.0 SOBIG.F Virus outbreak - temp fix - change your subject
554 5.0.0 Service unavailable
[-- Attachment #3: Type: message/delivery-status, Size: 496 bytes --]
[-- Attachment #4: Type: message/rfc822, Size: 1284 bytes --]
[-- Attachment #4.1.1: Type: text/plain, Size: 41 bytes --]
Please see the attached file for details.
[-- Attachment #4.1.2: Type: text/plain, Size: 187 bytes --]
------------------ Virus Warning Message (on the network)
your_document.pif is removed from here because it contains a virus.
---------------------------------------------------------
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-09-07 7:14 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-09-07 7:14 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 206 bytes --]
****************** Virus Warning Message (on syd-msg-core-1)
Found virus WORM_SOBIG.F in file document_9446.pif
The uncleanable file is deleted.
*********************************************************
[-- Attachment #2: Type: text/plain, Size: 516 bytes --]
The original message was received at Sun, 7 Sep 2003 17:14:15 +1000 (EST)
from [211.238.197.214]
----- The following addresses had permanent fatal errors -----
<kzm-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>
(reason: 552 5.0.0 SOBIG.F Virus outbreak - temp fix)
(expanded from: <kzm-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>)
----- Transcript of session follows -----
... while talking to syd-msg-core-1.cisco.com.:
>>> DATA
<<< 552 5.0.0 SOBIG.F Virus outbreak - temp fix
554 5.0.0 Service unavailable
[-- Attachment #3: Type: message/delivery-status, Size: 476 bytes --]
[-- Attachment #4: Type: message/rfc822, Size: 1285 bytes --]
[-- Attachment #4.1.1: Type: text/plain, Size: 41 bytes --]
Please see the attached file for details.
[-- Attachment #4.1.2: Type: text/plain, Size: 190 bytes --]
****************** Virus Warning Message (on syd-msg-core-1)
document_9446.pif is removed from here because it contains a virus.
*********************************************************
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-09-02 5:29 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-09-02 5:29 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 436 bytes --]
The original message was received at Tue, 2 Sep 2003 07:29:32 +0200 (MET DST)
from october.skynet.be [195.238.3.58]
----- The following addresses had permanent fatal errors -----
<vincent.brabant-AgBVmzD5pcezQB+pC5nmwQ@public.gmane.org>
(reason: Can't create output)
----- Transcript of session follows -----
---> Quota exceeded !!!
550 5.0.0 <vincent.brabant-AgBVmzD5pcezQB+pC5nmwQ@public.gmane.org>... Can't create output
[-- Attachment #2: Type: message/delivery-status, Size: 366 bytes --]
[-- Attachment #3: Type: message/rfc822, Size: 53266 bytes --]
[-- Attachment #3.1.1: Type: text/plain, Size: 33 bytes --]
See the attached file for details
[-- Attachment #3.1.2: _________warn.txt --]
[-- Type: application/octet-stream, Size: 81 bytes --]
RAV AntiVirus has deleted this file
because it contained dangerous code!
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-09-01 13:27 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-09-01 13:27 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 199 bytes --]
------------------ Virus Warning Message (on the network)
Found virus WORM_SOBIG.F in file movie0045.pif
The uncleanable file is deleted.
---------------------------------------------------------
[-- Attachment #2: Type: text/plain, Size: 555 bytes --]
The original message was received at Mon, 1 Sep 2003 06:26:32 -0700 (PDT)
from [218.246.97.16]
----- The following addresses had permanent fatal errors -----
<fred-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>
(reason: 552 5.0.0 SOBIG.F Virus outbreak - temp fix - change your subject)
(expanded from: <fred-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>)
----- Transcript of session follows -----
... while talking to sj-core-1.cisco.com.:
>>> DATA
<<< 552 5.0.0 SOBIG.F Virus outbreak - temp fix - change your subject
554 5.0.0 Service unavailable
[-- Attachment #3: Type: message/delivery-status, Size: 499 bytes --]
[-- Attachment #4: Type: message/rfc822, Size: 1294 bytes --]
[-- Attachment #4.1.1: Type: text/plain, Size: 33 bytes --]
See the attached file for details
[-- Attachment #4.1.2: Type: text/plain, Size: 183 bytes --]
------------------ Virus Warning Message (on the network)
movie0045.pif is removed from here because it contains a virus.
---------------------------------------------------------
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-08-31 22:59 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-08-31 22:59 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 508 bytes --]
The original message was received at Fri, 22 Aug 2003 00:31:24 +0200 (MET DST)
from MX1.net.yu [213.240.60.7]
----- The following addresses had permanent fatal errors -----
<dejan-4QYHkJwuHxQ@public.gmane.org>
(reason: Deferred)
----- Transcript of session follows -----
dejan: Over quota
<dejan-4QYHkJwuHxQ@public.gmane.org>... Deferred: cyrus mailer (/usr/inet/cyrus.imap/bin/deliver.smmsp) exited with EX_TEMPFAIL
Message could not be delivered for 5 days
Message will be deleted from queue
[-- Attachment #2: Type: message/delivery-status, Size: 342 bytes --]
[-- Attachment #3: Type: message/rfc822, Size: 5466 bytes --]
[-- Attachment #3.1.1: Type: text/plain, Size: 2028 bytes --]
************************************************************
*** U P O Z O R E N J E - D E T E K T O V A N V I R U S ***
*** V I R U S A L E R T ***
************************************************************
Nas antivirus softver pronasao je | Our viruschecker found the
Poruka: | Message:
Virus: | Virus:
().
virus(e) u posti za vas sa adrese: | virus(es) in an email to you from:
PAZNJA: Samodistribuirajuci virusi | ATTENTION: Self-distributing
cesto koriste lazne adrese u From: | viruses often use fake addresses
polju poruka, pa nije iskljucena | in From: field of the message,
mogucnost da je zarazena poruka | so it is possible that the
poslata sa racunara koji u svom | infected message was sent from
adresaru poseduje navedenu adresu, | a host that contains the above
bez znanja njegovog vlasnika. | address in the address book,
| without it's owner's knowledge.
--
SCnet Postmaster
E-Mail: postmaster-4QYHkJwuHxQ@public.gmane.org
Milentija Popovica 9, u Sava Centru DJ 31
11070 Beograd, Srbija
Phone/Fax: +381 11 3115684; 311 3481;311 4087
________________________________________________________________
SCnet - DSL Internet Veza
http://www.net.yu/usluge/dsl.htm
Bez biranja broja, bez cekanja, bez zauzimanja telefonske linije,
trosenja impulsa i pucanja veze! Jednostavno uvek dostupna i
veoma brza Internet veza 24 casa dnevno, 12 meseci u godini.
Za detaljnije informacije posetite nas sajt www.SCnet.yu ili
zovite nasu sluzbu prodaje: 011/311 5684, 311 3481
________________________________________________________________
Ova poruka je namenjena iskljucivo adresantu i njen sadrzaj je
poverljiv. Ukoliko niste osoba kojoj je namenjena, molimo Vas da
poruku izbrisete i o tome obavestite posiljaoca.
Found virus WORM_SOBIG.F in file details.pif
The file details.pif is moved to /tmp/virXFB4WIsIa.
---------------------------------------------------------
[-- Attachment #3.1.2: Type: text/plain, Size: 33 bytes --]
See the attached file for details
[-- Attachment #3.1.3: Type: text/plain, Size: 1993 bytes --]
************************************************************
*** U P O Z O R E N J E - D E T E K T O V A N V I R U S ***
*** V I R U S A L E R T ***
************************************************************
Nas antivirus softver pronasao je | Our viruschecker found the
Poruka: | Message:
Virus: | Virus:
().
virus(e) u posti za vas sa adrese: | virus(es) in an email to you from:
PAZNJA: Samodistribuirajuci virusi | ATTENTION: Self-distributing
cesto koriste lazne adrese u From: | viruses often use fake addresses
polju poruka, pa nije iskljucena | in From: field of the message,
mogucnost da je zarazena poruka | so it is possible that the
poslata sa racunara koji u svom | infected message was sent from
adresaru poseduje navedenu adresu, | a host that contains the above
bez znanja njegovog vlasnika. | address in the address book,
| without it's owner's knowledge.
--
SCnet Postmaster
E-Mail: postmaster-4QYHkJwuHxQ@public.gmane.org
Milentija Popovica 9, u Sava Centru DJ 31
11070 Beograd, Srbija
Phone/Fax: +381 11 3115684; 311 3481;311 4087
________________________________________________________________
SCnet - DSL Internet Veza
http://www.net.yu/usluge/dsl.htm
Bez biranja broja, bez cekanja, bez zauzimanja telefonske linije,
trosenja impulsa i pucanja veze! Jednostavno uvek dostupna i
veoma brza Internet veza 24 casa dnevno, 12 meseci u godini.
Za detaljnije informacije posetite nas sajt www.SCnet.yu ili
zovite nasu sluzbu prodaje: 011/311 5684, 311 3481
________________________________________________________________
Ova poruka je namenjena iskljucivo adresantu i njen sadrzaj je
poverljiv. Ukoliko niste osoba kojoj je namenjena, molimo Vas da
poruku izbrisete i o tome obavestite posiljaoca.
details.pif is removed from here because it contains a virus.
---------------------------------------------------------
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-08-28 13:37 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-08-28 13:37 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 493 bytes --]
The original message was received at Thu, 28 Aug 2003 16:36:38 +0300 (EEST)
from lsne-2-189.urbanet.ch [195.202.204.189]
----- The following addresses had permanent fatal errors -----
<kick-KDMkbwVjgnf0W2CE0TtwzA@public.gmane.org>
(reason: 550 5.7.1 Access denied)
----- Transcript of session follows -----
... while talking to renome.rovno.ua.:
>>> MAIL From:<acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org>
<<< 550 5.7.1 Access denied
554 5.0.0 Service unavailable
[-- Attachment #2: Type: message/delivery-status, Size: 339 bytes --]
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #3: Type: text/rfc822-headers, Size: 802 bytes --]
Return-Path: <acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org>
Received: from SAM1 (lsne-2-189.urbanet.ch [195.202.204.189])
by bn.utel.com.ua (8.12.9/8.12.8) with ESMTP id h7SDaVHe006636
for <kick-KDMkbwVjgnf0W2CE0TtwzA@public.gmane.org>; Thu, 28 Aug 2003 16:36:38 +0300 (EEST)
Message-Id: <200308281336.h7SDaVHe006636-zn/0lUS+MPvzHCZZHnFgRw@public.gmane.org>
From: <acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org>
To: <kick-KDMkbwVjgnf0W2CE0TtwzA@public.gmane.org>
Subject: Re: Wicked screensaver
Date: Thu, 28 Aug 2003 15:36:27 +0200
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_NextPart_000_0050B3DD"
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-08-28 6:43 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-08-28 6:43 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 637 bytes --]
The original message was received at Thu, 28 Aug 2003 08:43:24 +0200
from [218.94.68.13]
----- The following addresses had permanent fatal errors -----
<middelin-r1VxpKEbdWaEVqv0pETR8A@public.gmane.org>
(reason: 550 5.0.0 <middelin-r1VxpKEbdWaEVqv0pETR8A@public.gmane.org>... Wrong address.Check your information.)
----- Transcript of session follows -----
... while talking to mail.polyware.nl.:
>>> DATA
<<< 550 5.0.0 <middelin-r1VxpKEbdWaEVqv0pETR8A@public.gmane.org>... Wrong address.Check your information.
550 5.1.1 <middelin-r1VxpKEbdWaEVqv0pETR8A@public.gmane.org>... User unknown
<<< 503 5.0.0 Need RCPT (recipient)
[-- Attachment #2: Type: message/delivery-status, Size: 398 bytes --]
[-- Attachment #3: Type: message/rfc822, Size: 2295 bytes --]
[-- Attachment #3.1.1: Type: text/plain, Size: 212 bytes --]
Warning: This message has had one or more attachments removed
Warning: (wicked_scr.scr).
Warning: Please read the "VirusWarning.txt" attachment(s) for more information.
Please see the attached file for details.
[-- Attachment #3.1.2: VirusWarning.txt --]
[-- Type: text/plain, Size: 882 bytes --]
This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "wicked_scr.scr"
was believed to be infected by a virus and has been replaced by this warning
message.
If you wish to receive a copy of the *infected* attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.
At Thu Aug 28 08:43:46 2003 the virus scanner said:
wicked_scr.scr Infection: W32/Sobig.F@mm
Windows Screensavers are often used to hide viruses (wicked_scr.scr)
Note to Help Desk: Look on the MailScanner in /var/spool/MailScanner/quarantine/20030828 (message h7S6hLF3021834).
--
Postmaster
Mailscanner thanks transtec Computers for their support
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-08-22 14:28 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-08-22 14:28 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 891 bytes --]
The original message was received at Fri, 22 Aug 2003 16:28:09 +0200 (MET DST)
from smtprelay-eur1.philips.com [130.139.36.3]
----- The following addresses had permanent fatal errors -----
abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r/QT0dZR+AlfA@public.gmane.org
(reason: 550 <abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r/QT0dZR+AlfA@public.gmane.org>... User unknown)
(expanded from: <Andreas.Beckmann-+fpVzBjtgygiXR+Bm0NypcPN+1FZ69lz@public.gmane.org>)
----- Transcript of session follows -----
... while talking to hh10s110.hb.hamburg.sc.philips.com.:
>>> RCPT To:<abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r/QT0dZR+AlfA@public.gmane.org>
<<< 550 <abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r/QT0dZR+AlfA@public.gmane.org>... User unknown
550 5.1.1 abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r+mdvSpIQae8A@public.gmane.org User unknown
[-- Attachment #2: Type: message/delivery-status, Size: 626 bytes --]
[-- Attachment #3: Type: message/rfc822, Size: 2385 bytes --]
[-- Attachment #3.1.1: Type: text/plain, Size: 33 bytes --]
See the attached file for details
[-- Attachment #3.1.2: Type: text/plain, Size: 184 bytes --]
------------------ Virus Warning Message (on the network)
your_document.pif is removed from here because it is of type pif
---------------------------------------------------------
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-08-20 21:24 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-08-20 21:24 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 548 bytes --]
The original message was received at Wed, 20 Aug 2003 23:24:00 +0200 (MEST)
from localhost [127.0.0.1]
----- The following addresses had permanent fatal errors -----
<muerir-tu6zgXCX/2w@public.gmane.org>
(reason: 550 Invalid recipient <muerir-tu6zgXCX/2w@public.gmane.org>)
----- Transcript of session follows -----
... while talking to inselgate.insel.ch.:
>>> RCPT To:<muerir-tu6zgXCX/2w@public.gmane.org>
<<< 550 Invalid recipient <muerir-tu6zgXCX/2w@public.gmane.org>
550 5.1.1 <muerir-tu6zgXCX/2w@public.gmane.org>... User unknown
[-- Attachment #2: Type: message/delivery-status, Size: 390 bytes --]
[-- Attachment #3: Type: message/rfc822, Size: 1575 bytes --]
[-- Attachment #3.1.1: Type: text/plain, Size: 41 bytes --]
Please see the attached file for details.
[-- Attachment #3.1.2: Type: text/plain, Size: 180 bytes --]
------------------ Virus Warning Message (on the network)
thank_you.pif is removed from here because it is of type pif
---------------------------------------------------------
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-08-20 12:45 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-08-20 12:45 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
The original message was received at Wed, 20 Aug 2003 14:45:13 +0200
from p5089363B.dip.t-dialin.net [80.137.54.59]
----- The following addresses had permanent fatal errors -----
<hemmje-VjL1Zewfs7hM4/G6Yay4pw@public.gmane.org>
(reason: 550 <hemmje-VjL1Zewfs7hM4/G6Yay4pw@public.gmane.org>... User unknown)
----- Transcript of session follows -----
... while talking to sonne.darmstadt.gmd.de.:
>>> RCPT To:<hemmje-VjL1Zewfs7hM4/G6Yay4pw@public.gmane.org>
<<< 550 <hemmje-VjL1Zewfs7hM4/G6Yay4pw@public.gmane.org>... User unknown
550 5.1.1 <hemmje-VjL1Zewfs7hM4/G6Yay4pw@public.gmane.org>... User unknown
----- Original message follows -----
Received: from NARZISSDESKTOP (p5089363B.dip.t-dialin.net [80.137.54.59])
by mailserver1.hrz.tu-darmstadt.de (8.12.9/8.12.8) with ESMTP id h7KCjA3Y003949
for <hemmje-VjL1Zewfs7hM4/G6Yay4pw@public.gmane.org>; Wed, 20 Aug 2003 14:45:13 +0200
Message-Id: <200308201245.h7KCjA3Y003949-QPFuF50DZNoqhRXHcZIfJ9O7O0BNYJUHeY4T7p36O+M@public.gmane.org>
From: <acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org>
To: <hemmje-VjL1Zewfs7hM4/G6Yay4pw@public.gmane.org>
Subject: [VIRUS?] Re: Wicked screensaver
Date: Wed, 20 Aug 2003 14:45:49 +0200
X-MailScanner: Found to be clean, Found to be infected
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_NextPart_000_1F9EDAC0"
This is a multipart message in MIME format
--_NextPart_000_1F9EDAC0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Warning: This message has had one or more attachments removed.
Warning: Please read the "VirusWarning.txt" attachment(s) for more information.
Please see the attached file for details.
--_NextPart_000_1F9EDAC0
Content-Type: text/plain; charset="us-ascii"; name="VirusWarning.txt"
Content-Disposition: attachment; filename="VirusWarning.txt"
Content-Transfer-Encoding: quoted-printable
This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "your_document.pif"
was believed to be infected by a virus and has been replaced by this warning
message.
If you wish to receive a copy of the *infected* attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.
At Wed Aug 20 14:45:35 2003 the virus scanner said:
>>> Virus 'W32/Sobig-F' found in file ./h7KCjA3Y003949/your_document.pif
Note to Help Desk: Look on the MailScanner in /var/spool/mailscanner/quaran=
tine (message h7KCjA3Y003949).
--=20
Postmaster
--_NextPart_000_1F9EDAC0--
-------------------------------------------------------
This SF.net email is sponsored by Dice.com.
Did you know that Dice has over 25,000 tech jobs available today? From
careers in IT to Engineering to Tech Sales, Dice has tech jobs from the
best hiring companies. http://www.dice.com/index.epl?rel_code=104
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-07-09 11:38 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-07-09 11:38 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
The original message was received at Wed, 9 Jul 2003 04:38:07 -0700 (PDT)
from root@localhost
----- The following addresses had permanent fatal errors -----
dhow-8cQiHa/C+6Go9G/jEpaUCQ@public.gmane.org
(reason: 550 dhow-8cQiHa/C+6Go9G/jEpaUCQ@public.gmane.org unknown user account)
----- Transcript of session follows -----
... while talking to mail.megapathdsl.net.:
>>> DATA
<<< 550 dhow-8cQiHa/C+6Go9G/jEpaUCQ@public.gmane.org unknown user account
550 5.1.1 dhow-8cQiHa/C+6Gh/0f5egwwDK1cXZ9k6wlg@public.gmane.org User unknown; please visit the Stanford Directory at http://stanfordwho.stanford.edu/ to find the correct address
<<< 503 no valid RCPT address specified
----- Original message follows -----
Return-Path: <acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org>
Received: (from root@localhost)
by smtp2.Stanford.EDU (8.12.9/8.12.9) id h69Bc7XQ028704
for dhow-8cQiHa/C+6Go9G/jEpaUCQ@public.gmane.org; Wed, 9 Jul 2003 04:38:07 -0700 (PDT)
Received: from isl.stanford.edu (isl.Stanford.EDU [171.64.92.10])
by smtp2.Stanford.EDU (8.12.9/8.12.9) with ESMTP id h69Bc5rH028699
for <dhow-8cQiHa/C+6Go9G/jEpaUCQ@public.gmane.org>; Wed, 9 Jul 2003 04:38:05 -0700 (PDT)
Received: from TANGTIANWU ([211.162.218.53])
by isl.stanford.edu (8.12.8/8.12.8) with ESMTP id h69BwZ4O015526
for <how-ItaBHmGXlNmUGpqOsapiRQ@public.gmane.org>; Wed, 9 Jul 2003 04:58:36 -0700
Message-Id: <200307091158.h69BwZ4O015526-ItaBHmGXlNmUGpqOsapiRQ@public.gmane.org>
From: <acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org>
To: <how-yE31w2q0LH+tAZNsN2mF1A@public.gmane.org>
Subject: Re: Movie
Date: Wed, 9 Jul 2003 19:37:31 +0800
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="CSmtpMsgPart123X456_000_001D30A8"
This is a multipart message in MIME format
--CSmtpMsgPart123X456_000_001D30A8
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
------------------ Virus Warning Message (on the network)
Found virus WORM_SOBIG.E in file details.pif (in your_details.zip)
The file is deleted.
ALERT: The attachment that accompanied this email was infected by a virus. The system dealt with the problem, as described above. This should pre vent the virus from infecting your computer. If you have questions, contact the sender or go to: http://email.stanford.edu/virus.html. Note that some viruses, such as the Klez, BugBear and Yaha, forge the sender's address. In these cases, the sender may or may not be the actual person who sent the virus-infected mail. The text of your correspondent's message follows.
---------------------------------------------------------
--CSmtpMsgPart123X456_000_001D30A8
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Please see the attached zip file for details.
--CSmtpMsgPart123X456_000_001D30A8
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
------------------ Virus Warning Message (on the network)
your_details.zip is removed from here because it contains a virus.
---------------------------------------------------------
--CSmtpMsgPart123X456_000_001D30A8--
-------------------------------------------------------
This SF.Net email sponsored by: Parasoft
Error proof Web apps, automate testing & more.
Download & eval WebKing and get a free book.
www.parasoft.com/bulletproofapps
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-07-03 6:48 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-07-03 6:48 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 622 bytes --]
The original message was received at Thu, 3 Jul 2003 01:48:02 -0500
from localhost [127.0.0.1]
----- The following addresses had permanent fatal errors -----
<siekas-PYEadblV/CmCWrxS0lzTZfS0inHq18Tv@public.gmane.org>
(reason: 550 5.1.1 <siekas-PYEadblV/CmCWrxS0lzTZfS0inHq18Tv@public.gmane.org>... User unknown)
----- Transcript of session follows -----
... while talking to [129.81.224.6]:
>>> DATA
<<< 550 5.1.1 <siekas-PYEadblV/CmCWrxS0lzTZfS0inHq18Tv@public.gmane.org>... User unknown
550 5.1.1 <siekas-PYEadblV/CmCWrxS0lzTZfS0inHq18Tv@public.gmane.org>... User unknown
<<< 503 5.0.0 Need RCPT (recipient)
[-- Attachment #2: Type: message/delivery-status, Size: 423 bytes --]
[-- Attachment #3: Type: message/rfc822, Size: 2308 bytes --]
[-- Attachment #3.1.1: Type: text/plain, Size: 247 bytes --]
------------------ Virus Warning Message (on trend1)
Found virus WORM_SOBIG.E in file details.pif (in your_details.zip)
The file your_details.zip is moved to /etc/iscan/virus/viri1gHdB.
---------------------------------------------------------
[-- Attachment #3.1.2: Type: text/plain, Size: 45 bytes --]
Please see the attached zip file for details.
[-- Attachment #3.1.3: Type: text/plain, Size: 181 bytes --]
------------------ Virus Warning Message (on trend1)
your_details.zip is removed from here because it contains a virus.
---------------------------------------------------------
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-06-30 13:50 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-06-30 13:50 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 596 bytes --]
The original message was received at Mon, 30 Jun 2003 15:50:42 +0200 (CEST)
from [202.103.155.243]
----- The following addresses had permanent fatal errors -----
<dagb-WiQn+q4tdXRhl2p70BpVqQ@public.gmane.org>
(reason: 550 5.1.1 <dagb-WiQn+q4tdXRhl2p70BpVqQ@public.gmane.org>... User unknown)
----- Transcript of session follows -----
... while talking to hpserv0.cs.uit.no.:
>>> RCPT To:<dagb-WiQn+q4tdXRhl2p70BpVqQ@public.gmane.org>
<<< 550 5.1.1 <dagb-WiQn+q4tdXRhl2p70BpVqQ@public.gmane.org>... User unknown
550 5.1.1 <dagb-WiQn+q4tdXRhl2p70BpVqQ@public.gmane.org>... User unknown
[-- Attachment #2: Type: message/delivery-status, Size: 416 bytes --]
[-- Attachment #3: Type: message/rfc822, Size: 2198 bytes --]
[-- Attachment #3.1.1: WARNING.TXT --]
[-- Type: text/plain, Size: 672 bytes --]
ADVARSEL: Denne meldinga inneholdt et kjent virus eller et vedlegg som
kunne utgjøre en sikkerhetsrisiko. Vedlegget er blitt fjernet.
Se <http://www.cc.uit.no/nett/epost/virusFAQ.html> for mer informasjon eller
kontakt UiT Postmaster <defang-admin-hYqmg196XYc@public.gmane.org>.
WARNING: This email contained a known virus or a dangerous attachment
and has been modified.
For more information, please contact UiT Postmaster <defang-admin-hYqmg196XYc@public.gmane.org>.
A known virus was discovered and deleted. Virus-scanner messages follow:
/var/spool/MIMEDefang/mdefang-h5UDoegF040805/Work/msg-34945-200.zip/details.pif infected: I-Worm.Sobig.gen
[-- Attachment #3.1.2: Type: text/plain, Size: 45 bytes --]
Please see the attached zip file for details.
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-06-30 11:37 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-06-30 11:37 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 357 bytes --]
------------------ Virus Warning Message (on the network)
Found virus WORM_SOBIG.E in file details.pif (in your_details.zip)
The uncleanable file is deleted.
If you are an internal Cisco employee, more information can be found at the following internal location: http://mailer.cisco.com/virus/
---------------------------------------------------------
[-- Attachment #2: Type: text/plain, Size: 674 bytes --]
The original message was received at Mon, 30 Jun 2003 04:37:45 -0700 (PDT)
from [202.120.16.1]
----- The following addresses had permanent fatal errors -----
<jrowe-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>
(reason: 550 5.1.1 <jrowe-utT5/ZYDcdqU+GOnkdjqUdBPR1lH4CV8@public.gmane.org>... User unknown)
(expanded from: <jrowe-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>)
----- Transcript of session follows -----
... while talking to rtp-core-2.cisco.com.:
>>> DATA
<<< 550 5.1.1 <jrowe-utT5/ZYDcdqU+GOnkdjqUdBPR1lH4CV8@public.gmane.org>... User unknown
550 5.1.1 <jrowe-FYB4Gu1CFyUAvxtiuMwx3w@public.gmane.org>... User unknown
<<< 503 5.0.0 Need RCPT (recipient)
[-- Attachment #3: Type: message/delivery-status, Size: 515 bytes --]
[-- Attachment #4: Type: message/rfc822, Size: 1341 bytes --]
[-- Attachment #4.1.1: Type: text/plain, Size: 45 bytes --]
Please see the attached zip file for details.
[-- Attachment #4.1.2: Type: text/plain, Size: 186 bytes --]
------------------ Virus Warning Message (on the network)
your_details.zip is removed from here because it contains a virus.
---------------------------------------------------------
^ permalink raw reply [flat|nested] 16+ messages in thread* Returned mail: see transcript for details
@ 2003-06-04 3:02 Mail Delivery Subsystem
0 siblings, 0 replies; 16+ messages in thread
From: Mail Delivery Subsystem @ 2003-06-04 3:02 UTC (permalink / raw)
To: acpi-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f
[-- Attachment #1: Type: text/plain, Size: 891 bytes --]
The original message was received at Wed, 4 Jun 2003 05:02:55 +0200 (MET DST)
from smtprelay-nam2.philips.com [167.81.233.16]
----- The following addresses had permanent fatal errors -----
abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r/QT0dZR+AlfA@public.gmane.org
(reason: 550 <abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r/QT0dZR+AlfA@public.gmane.org>... User unknown)
(expanded from: <Andreas.Beckmann-+fpVzBjtgygiXR+Bm0NypcPN+1FZ69lz@public.gmane.org>)
----- Transcript of session follows -----
... while talking to hh10s110.hb.hamburg.sc.philips.com.:
>>> RCPT To:<abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r/QT0dZR+AlfA@public.gmane.org>
<<< 550 <abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r/QT0dZR+AlfA@public.gmane.org>... User unknown
550 5.1.1 abeckman-Je3dkSy07xl21yjm4i45wwVSnNaW5J9nd4NI65zh+r+mdvSpIQae8A@public.gmane.org User unknown
[-- Attachment #2: Type: message/delivery-status, Size: 624 bytes --]
[-- Attachment #3: Type: message/rfc822, Size: 2829 bytes --]
[-- Attachment #3.1.1: Type: text/plain, Size: 407 bytes --]
------------------ Virus Warning Message (on smtpscan-us2) ------------------
Found virus WORM_SOBIG.C in file approved.pif
The uncleanable file approved.pif is moved to /etc/iscan/virus/virDFNTj2Or4.
------------------ Known viruses have been removed. Please contact the sender. If you have questions, contact your local helpdesk or postmaster-//tT4aWmXyZBDgjK7y7TUQ@public.gmane.org ------------------
[-- Attachment #3.1.2: Type: text/plain, Size: 29 bytes --]
Please see the attached file.
[-- Attachment #3.1.3: Type: text/plain, Size: 347 bytes --]
------------------ Virus Warning Message (on smtpscan-us2) ------------------
approved.pif is removed from here because it contains a virus.
------------------ Known viruses have been removed. Please contact the sender. If you have questions, contact your local helpdesk or postmaster-//tT4aWmXyZBDgjK7y7TUQ@public.gmane.org ------------------
^ permalink raw reply [flat|nested] 16+ messages in thread
end of thread, other threads:[~2003-09-07 7:51 UTC | newest]
Thread overview: 16+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-09-04 5:11 Returned mail: see transcript for details Mail Delivery Subsystem
-- strict thread matches above, loose matches on Subject: below --
2003-09-07 7:51 Mail Delivery Subsystem
2003-09-07 7:14 Mail Delivery Subsystem
2003-09-02 5:29 Mail Delivery Subsystem
2003-09-01 13:27 Mail Delivery Subsystem
2003-08-31 22:59 Mail Delivery Subsystem
2003-08-28 13:37 Mail Delivery Subsystem
2003-08-28 6:43 Mail Delivery Subsystem
2003-08-22 14:28 Mail Delivery Subsystem
2003-08-20 21:24 Mail Delivery Subsystem
2003-08-20 12:45 Mail Delivery Subsystem
2003-07-09 11:38 Mail Delivery Subsystem
2003-07-03 6:48 Mail Delivery Subsystem
2003-06-30 13:50 Mail Delivery Subsystem
2003-06-30 11:37 Mail Delivery Subsystem
2003-06-04 3:02 Mail Delivery Subsystem
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox