Mike Burger wrote:
> Silly question, but who signed the list up for another list?
Noone. It was a virus sending itself to the suse-list with the xfs list
as the sender address. Just read the included headers below...
Cheers,
Juri
>> Return-Path: <linux-xfs@xxxxxxxxxxx>
>> Received: (qmail 10923 invoked from network); 3 Apr 2004 12:00:10 -0000
>> Received: from unknown (HELO hermes.suse.de) (195.135.221.8)
>> by 0 with SMTP; 3 Apr 2004 12:00:10 -0000
>> Received: from scanhost.suse.de (scanhost.suse.de [10.0.0.5])
>> by hermes.suse.de (Postfix) with ESMTP id 59060178DD
>> for <suse-linux-help@xxxxxxxxxxxxxx>; Sat, 3 Apr 2004 14:00:10 +0200
>> (CEST)
>> Received: by scanhost.suse.de (Postfix, from userid 0)
>> id 5140A1A922; Sat, 3 Apr 2004 14:00:10 +0200 (CEST)
>> Delivered-To: virus-quarantine
>> X-Quarantine-id: <virus-20040403-135021-28861-09>
>> Received: from Cantor.suse.de (ns.suse.de [195.135.220.2]) (using TLSv1
>> with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) (No client
>> certificate requested) by hermes.suse.de (Postfix) with ESMTP id
>> 432771ABC0 for <suse-linux-help@xxxxxxxx>; Sat, 3 Apr 2004 13:50:21
>> +0200 (CEST)
>> Received: from suse.com (p50830AFB.dip0.t-ipconnect.de [80.131.10.251])
>> by Cantor.suse.de (Postfix) with ESMTP id EC4DC3DAE50 for
>> <suse-linux-help@xxxxxxxx>; Sat, 3 Apr 2004 13:50:14 +0200 (CEST)
>> From: linux-xfs@xxxxxxxxxxx
>> To: suse-linux-help@xxxxxxxx
>> Subject: Mail Delivery (failure suse-linux-help@xxxxxxxx)
>> Date: Sat, 3 Apr 2004 13:48:04 +0100
>> MIME-Version: 1.0
>> Content-Type: text/plain; charset="us-ascii"
>> Message-Id: <20040403115014.EC4DC3DAE50@xxxxxxxxxxxxxx>
>> X-AMaViS-Alert: INFECTED, message contains virus: Worm.SomeFool.P
>> X-Converted-To-Plain-Text: from multipart/related by demime 1.1d
>> X-Converted-To-Plain-Text: Alternative section used was multipart/alternative
>>
>>
>> [the SUSE virus scanner removed an attachment of type audio/x-wav which had
>> a name of message.scr]
>> [if you need the message in its original form including all attachments,
>> please ask the SENDER for a version free of viruses]
|