Hi all i have seen some one sending behalf me virus to list iam also checking , this is for ur information you can block this IP''s Received: (qmail 20262 invoked from network); 27 Jan 2004 19:34:55 -0000 Received: from unknown (HELO outpost.ds9a.nl) (213.244.168.210) by 202.63.96.248 with SMTP; 27 Jan 2004 19:34:55 -0000 Received: from outpost.ds9a.nl (outpost [127.0.0.1]) by outpost.ds9a.nl (Postfix) with ESMTP id 6A5B344B7; Tue, 27 Jan 2004 15:11:19 +0100 (CET) but this not belong to my IP sorry for inconvenience caused hare ----- Original Message ----- From: <hareram@sol.net.in> To: <lartc@mailman.ds9a.nl> Sent: Tuesday, January 27, 2004 7:40 PM Subject: [LARTC] Server Report> > >_______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Michael Renzmann
2004-Jan-27 15:51 UTC
Re the virus-mails on this list (was: Re: Server Report)
Hi. hare ram wrote:> i have seen some one sending behalf me virus to listThis is quite common for today''s mass mailing worms, such as the one we are "allowed" to see in action since yesterday. Those worms harvest any e-mail address from infected system and spoof the sender of the messages that get sent out. So it''s not someone who want to discredit you or anyone else, it''s the nature of these worms. It won''t be very effective to block any IPs - the better way would be to upgrade your AV product''s datafiles so that it is able to detect and remove the virus. Further information about this virus/worm can be found (for example) at: http://www.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html http://vil.nai.com/vil/content/v_100983.htm http://www.f-secure.com/v-descs/novarg.shtml http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL.R Hope this helps a little :) Bye, Mike _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/