OT: Virus or Trojan Attack
Rodger Whitlock (Thu, 09 Feb 2006 20:53:56 PST)

I'm receiving email messages that clearly contain a virus or trojan. Given the
email addresses they're being sent to, they're probably coming from some subscriber to
one of the mailing lists to which this message is being sent.

Originating IP addresses are:

86.27.53.245
82.20.15.219 (twice)
86.27.51.10 (twice)

The Date: header suggests that these are in the UK.

If you recognize any of these as being YOUR IP address, please disconnect your machine
from the internet NOW. Everyone else is urged to be VERY wary about opening messages
that purport to be from your ISP or any unrecognized source. Use of an email program
that allows examination of headers without downloading messages from the server is
strongly recommended. Pegasus is such a program.

Subject headers include:

Subject: e tr
Subject: Returned mail: see transcript for details
Subject: Mail System Error - Returned Mail
Subject: DELIVERY REPORTS ABOUT YOUR E-MAIL

plus a blank subject header

Message size is around 42000 bytes.

--
Rodger Whitlock
Victoria, British Columbia, Canada
Maritime Zone 8, a cool Mediterranean climate

on beautiful Vancouver Island