From owner-freebsd-isp@FreeBSD.ORG Wed Mar 3 08:21:20 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D28E816A4CE for ; Wed, 3 Mar 2004 08:21:20 -0800 (PST) Received: from ext-ch1gw-5.online-age.net (ext-ch1gw-5.online-age.net [64.37.194.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5F98743D46 for ; Wed, 3 Mar 2004 08:21:20 -0800 (PST) (envelope-from lapinski@crd.ge.com) Received: from int-ch1gw-2.online-age.net (int-ch1gw-2 [3.159.232.66]) id i23GLGZd011323; Wed, 3 Mar 2004 11:21:17 -0500 (EST) Received: from crdns.crd.ge.com (localhost [127.0.0.1]) id i23GLF7r021358; Wed, 3 Mar 2004 11:21:16 -0500 (EST) Received: from xbh01crdge.crd.ge.com (xbh01crdge.crd.ge.com [3.159.72.22]) by crdns.crd.ge.com (8.11.6p2/8.11.6) with ESMTP id i23GLEY03760; Wed, 3 Mar 2004 11:21:14 -0500 (EST) Received: by xbh01crdge.crd.ge.com with Internet Mail Service (5.5.2653.19) id ; Wed, 3 Mar 2004 11:21:14 -0500 Message-ID: From: "Lapinski, Michael (Research)" To: "'Denny Jodeit'" , freebsd-isp@freebsd.org Date: Wed, 3 Mar 2004 11:21:11 -0500 X-Mailer: Internet Mail Service (5.5.2653.19) Subject: RE: One of you has a virus... X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Mar 2004 16:21:21 -0000 I believe that http://vil.nai.com/vil/content/v_101071.htm is our culprit in this case. -mtl -------------------------------------------------- Michael Lapinski Computer Scientist GE Research "I think there is a world market for maybe five computers." - IBM Chairman Thomas Watson, 1943 > -----Original Message----- > From: Denny Jodeit [mailto:tech@flare.net] > Sent: Wednesday, March 03, 2004 10:50 AM > To: freebsd-isp@freebsd.org > Subject: Re: One of you has a virus... > > > I've received this same message from several email domains > this morning, as > have several of my customers. It's simply the the profile of > whichever email > trojan virus is running rampant this week. > ----- Original Message ----- > From: "Freebsd" > To: > Sent: Wednesday, March 03, 2004 10:34 AM > Subject: Re: One of you has a virus... > > > > It looks to me this is more like a targetted attack against > freebsd.org. > > > > Those emails (the account warnings) look like they were > generated by a > > trojan/virus/script. > > > > On Tue, 2004-03-02 at 20:15, Ralph Forsythe wrote: > > > Would whoever was dumb enough to open some attachment and > infect their > > > computer with a virus please install some damn anti-virus software > already?? > > > > > > At 07:04 PM 3/2/2004 -0700, you wrote: > > > >Dear user of e-mail server "Freebsd.org", > > > > > > > >Some of our clients complained about the spam (negative e-mail > content) > > > >outgoing from your e-mail account. Probably, you have > been infected > by > > > >a proxy-relay trojan server. In order to keep your > computer safe, > > > >follow the instructions. > > > > > > > >Advanced details can be found in attached file. > > > > > > > >Sincerely, > > > > The Freebsd.org team > http://www.freebsd.org > > > > > > > > > > -- > > Michael King > > Systems Administrator > > Web International, Inc. > > > > _______________________________________________ > > freebsd-isp@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-isp > > To unsubscribe, send any mail to > "freebsd-isp-unsubscribe@freebsd.org" > > > > > _______________________________________________ > freebsd-isp@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-isp > To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org" >