OT: Virus or Trojan Attack

Rodger Whitlock totototo@telus.net
Thu, 09 Feb 2006 20:53:56 PST
I'm receiving email messages that clearly contain a virus or trojan. Given the 
email addresses they're being sent to, they're probably coming from some subscriber to 
one of the mailing lists to which this message is being sent.

Originating IP addresses are:

86.27.53.245
82.20.15.219 (twice)
86.27.51.10 (twice)

The Date: header suggests that these are in the UK.

If you recognize any of these as being YOUR IP address, please disconnect your machine 
from the internet NOW. Everyone else is urged to be VERY wary about opening messages 
that purport to be from your ISP or any unrecognized source. Use of an email program 
that allows examination of headers without downloading messages from the server is 
strongly recommended. Pegasus is such a program.

Subject headers include:

Subject: e tr
Subject: Returned mail: see transcript for details
Subject: Mail System Error - Returned Mail
Subject: DELIVERY REPORTS ABOUT YOUR E-MAIL

plus a blank subject header

Message size is around 42000 bytes.


-- 
Rodger Whitlock
Victoria, British Columbia, Canada
Maritime Zone 8, a cool Mediterranean climate

on beautiful Vancouver Island


More information about the pbs mailing list