From owner-freebsd-questions@FreeBSD.ORG Wed Sep 12 15:10:02 2007 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 31E0816A419 for ; Wed, 12 Sep 2007 15:10:02 +0000 (UTC) (envelope-from bob.middaugh@comcast.net) Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net [204.127.192.81]) by mx1.freebsd.org (Postfix) with ESMTP id 1342013C480 for ; Wed, 12 Sep 2007 15:10:01 +0000 (UTC) (envelope-from bob.middaugh@comcast.net) Received: from rmailcenter75.comcast.net ([204.127.197.157]) by comcast.net (rwcrmhc11) with SMTP id <20070912145644m11003mnnbe>; Wed, 12 Sep 2007 14:56:45 +0000 Received: from [199.20.118.74] by rmailcenter75.comcast.net; Wed, 12 Sep 2007 14:56:42 +0000 From: bob.middaugh@comcast.net (Bob Middaugh) To: Greetings.com , questions@freebsd.org Date: Wed, 12 Sep 2007 14:56:42 +0000 Message-Id: <091220071456.14659.46E7FE2A0002394800003943220642461308099A0E0B0B0703D20D010D@comcast.net> X-Mailer: AT&T Message Center Version 1 (Oct 4 2006) X-Authenticated-Sender: Ym9iLm1pZGRhdWdoQGNvbWNhc3QubmV0 Cc: Subject: Re: Hey, you have a new Greeting !!! (exploit for Win32) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Sep 2007 15:10:02 -0000 Just an FYI If you're on a win32 machine, and read your mail in HTML, don't open this as it will execute a .pif file ( win32 PE, portable executable) that wants to put sup.bat in your /system32 to do something undesirable...haven't figured that out yet. If you read in plain text, you'll see this link: http://members.lycos.co.uk/patacftp/postcard.pif Don't click on that either. We're blocking .pif at the SMTP gateway. This is what symantec says when I scan it: Scan type: Manual Scan Event: Threat Found! Threat: IRC Trojan -------------- Original message ---------------------- From: Greetings.com > > Hello friend ! > You have just received a postcard Greeting from someone who cares > about you... > > Just click [1]here to receive your Animated Greeting ! > > Thank you for using www.Greetings.com services !!! > Please take this opportunity to let your friends hear about us by > sending them a postcard from our collection ! > > > References > > 1. http://members.lycos.co.uk/patacftp/postcard.pif > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"