Re: AO-40 Transponder Operation

From: Jean-Paul ROUBELAT (yxy.gmdxx@uniroma3.it)
Date: Fri Oct 04 2002 - 10:28:07 EEST

  • Next message: Cees Tool: "Virus Warning (was: Re: AO-40 Transponder Operation)"

    Yes, Graham's mail holds a virus 

    ---

    Here is the output of the scanner:

    AntiVir / Linux Version 2.0.4-6
Copyright (C) 1994-2002 by H+BEDV Datentechnik GmbH.
All rights reserved.

    Loading /usr/bin/../lib/AntiVir/antivir.vdf ...

    VDF version: 6.15.0.14 created 02 Oct 2002

    checking drive/path (list):
/var/spool/vscan/amavis/amavis-milter-XXiDqNzb/parts
/var/spool/vscan/amavis/amavis-milter-XXiDqNzb/parts/msg-29221-2.exe
 Date:  4.10.2002  Time: 04:15:57  Size: 50688
 ALERT: [Worm/Tanatos.1 virus]
/var/spool/vscan/amavis/amavis-milter-XXiDqNzb/parts/msg-29221-2.exe

    <<< Contains signature of the worm Worm/Tanatos.1

    -----------------------------------------------------------------------
Jean-Paul ROUBELAT - F6FBB      | Computers are like air-conditioners :
Packet: terhi.victor@logonet.com | they stop working properly as soon as
Email : gvixoml.yztfuasdbx@ida.net           | you open windows.
WEB   : http://www.f6fbb.org    |
-----------------------------------------------------------------------

    ----- Original Message -----
From: "Craig Small" <vueyyz.muazplwbwj@mediasat.ro>
To: "Brett Mueller" <yjz.czxsqpge@ishsi.com>
Cc: <jqbws.tnztm@atlantia.com>
Sent: Friday, October 04, 2002 8:58 AM
Subject: Re: AO-40 Transponder Operation

    > On Thu, Oct 03, 2002 at 09:47:58PM -0700, Brett Mueller wrote:
> > Hmm, looks a bit fishy to me:
> >
> > Someone's machine at 203.87.77.236 wrote:
> > > Hi All,
> > >
> > > AO-40 Message of the Day:
> > >
> > > +--------------------------------------------------------------+
> > > | ALON/ALAT=30/5, EXPERIMENTAL U/L1->S2, MA 1
> > >
> > > Content-Type: application/x-msdownload; name="DOG1.MPG.exe"
> > > Content-Transfer-Encoding: base64
> > > Content-Disposition: attachment; filename="DOG1.MPG.exe"
>
> Double suffix files, it's Klez worm.
>
>   - Craig
> --
> Craig Small VK2XLZ  GnuPG:1C1B D893 1418 2AF4 45EE  95CB C76C E5AC 12CA
DFA5
> Eye-Net Consulting http://www.enc.com.au/
<tmuor@parma.ru>
> MIEEE <terhi.victor@logonet.com>                 Debian developer
<fixbik@adicon.net>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-hams" in
> the body of a message to ycg@infomatrix.com
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>

    -
To unsubscribe from this list: send the line "unsubscribe linux-hams" in
the body of a message to gilkl.yiytfokelm@fote.com
More majordomo info at  http://vger.kernel.org/majordomo-info.html

    This archive was generated by hypermail 2b30 : Fri Oct 04 2002 - 10:35:20 EEST