I've received a mail from the list (today at 0.38) with the subject test. It appears to be a w32.novarg.a@mm virus. Any idea ? Giovanni
Giovanni Racciu a écrit:
I've received a mail from the list (today at 0.38) with the subject test.
It appears to be a w32.novarg.a@mm virus. Any idea ?
Giovanni
Have you looked to the complete headers or the source of the message to see from where it realy comes ? --------------------------------------------------------------------- Patrick TRAU http://pat.fr.st 12 rue du Lansberg 67210 OBERNAI J'ai adopté le meilleur traitement de texte actuel, StarOffice 7. (ou sa version libre OpenOffice.org) Et vous, combien coûte le votre? ---------------------------------------------------------------------
the source is: Received: from lists.suse.com (lists.suse.com [195.135.221.131]) but did you (all) receive the same e-mail ? Giovanni Patrick Trau wrote:
Giovanni Racciu a écrit:
I've received a mail from the list (today at 0.38) with the subject test.
It appears to be a w32.novarg.a@mm virus. Any idea ?
Giovanni
Have you looked to the complete headers or the source of the message to see from where it realy comes ?
--------------------------------------------------------------------- Patrick TRAU http://pat.fr.st 12 rue du Lansberg 67210 OBERNAI
J'ai adopté le meilleur traitement de texte actuel, StarOffice 7. (ou sa version libre OpenOffice.org) Et vous, combien coûte le votre? ---------------------------------------------------------------------
Am Dienstag, 27. Januar 2004 11:34 schrieb Giovanni Racciu:
the source is:
Received: from lists.suse.com (lists.suse.com [195.135.221.131])
but did you (all) receive the same e-mail ?
Can you specify the mail with subject, sender and date? I got no warning message and could not find a mail with an attachment. Al
Can you specify the mail with subject, sender and date? I got no warning message and could not find a mail with an attachment.
I got one from the list that looks like a mimail, but it had no attachement. By the way, why is this list so hard to reply to?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Giovanni Racciu wrote: | I've received a mail from the list (today at 0.38) with the subject test. | It appears to be a w32.novarg.a@mm virus. | Any idea ? http://www.antivir.ru/english/inf/news.php?id=704 Having infected the computer, the worm e-mails itself to all the addresses found in the Windows Address Book and in local files. Due to its ability to spoof not only [To:] but also [From:] field with e-mail addresses found in the infected computer the e-mail recipient can easily be confused as to the actual sender of the infected message. - -- Boris B. Zhmurov DialogueScience, Inc. Technical department. 40 Vavilova St., Moscow, 119991, Russia Tel.: (+7-095) 137-0150, 135-6253 HTTP://www.antivir.ru FTP://ftp.antivir.ru "wget http://bb.dials.ru/bb_public_key.pgp -O - | gpg --import" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQFAFj0wmEQixi5w37YRAs9xAJ9uCZwZdJn7qgFvC3ynJ7+cHX2psgCfSXV4 ht4rtiQKoBc5QRXvUZVtpkA= =5Gly -----END PGP SIGNATURE-----
Giovanni Racciu wrote:
I've received a mail from the list (today at 0.38) with the subject test.
It appears to be a w32.novarg.a@mm virus. Any idea ?
someone who's infected with the virus mailed it to the list. At least you cannot say if the sender is the real one cause those viruses like to fake it (i got some bounces from av-scanners out there who told me that i send an infected mail ...) But, the list is working and so the attachment has been removed. The headers won't tell you who the sender was cause it get stripped by ezmlm. regards, Sven
participants (6)
-
Al Bogner -
BarkerJr -
Boris B. Zhmurov -
Giovanni Racciu -
Patrick Trau -
Sven 'Darkman' Michels