From owner-freebsd-isp@FreeBSD.ORG  Wed Mar  3 07:42:08 2004
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C26C316A4CE
	for <freebsd-isp@freebsd.org>; Wed,  3 Mar 2004 07:42:08 -0800 (PST)
Received: from trane.webintl.com (trane.webintl.com [209.248.144.124])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 25CA143D41
	for <freebsd-isp@freebsd.org>; Wed,  3 Mar 2004 07:42:08 -0800 (PST)
	(envelope-from freebsd@webinternational.net)
Received: from trane.webintl.com (trane.webintl.com [209.248.144.124])
	by trane.webintl.com (Postfix) with ESMTP id 6402CCFC01C
	for <freebsd-isp@freebsd.org>; Wed,  3 Mar 2004 09:34:26 -0600 (CST)
From: Freebsd <freebsd@webinternational.net>
To: freebsd-isp@freebsd.org
In-Reply-To: <5.1.0.14.2.20040302191234.037d0640@mail.centerone.com>
References: <5.1.0.14.2.20040302191234.037d0640@mail.centerone.com>
Content-Type: text/plain
Message-Id: <1078328065.4503.2.camel@trane.webintl.com>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.3 
Date: 03 Mar 2004 09:34:25 -0600
Content-Transfer-Encoding: 7bit
Subject: Re: One of you has a virus...
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Mar 2004 15:42:08 -0000

It looks to me this is more like a targetted attack against freebsd.org.

Those emails (the account warnings) look like they were generated by a
trojan/virus/script.

On Tue, 2004-03-02 at 20:15, Ralph Forsythe wrote:
> Would whoever was dumb enough to open some attachment and infect their 
> computer with a virus please install some damn anti-virus software already??
> 
> At 07:04 PM 3/2/2004 -0700, you wrote:
> >Dear user of e-mail server "Freebsd.org",
> >
> >Some of our clients complained about the  spam (negative e-mail content)
> >outgoing from your e-mail account. Probably,  you have been  infected by
> >a proxy-relay trojan server. In order to keep  your computer  safe,
> >follow the instructions.
> >
> >Advanced  details can be found in attached file.
> >
> >Sincerely,
> >    The Freebsd.org team                               http://www.freebsd.org
> >


-- 
Michael King
Systems Administrator
Web International, Inc.