search for: mydoom

...#39;s or mailing archives. We have a Solaris box with Samba installed. We are on a campus network where boxes that are infected are blocked from the network as a security measure. We have had our server blocked as it is probing port 25 and the security office are convinced that we are infected by MyDoom. Obviously, they think that it is a windows system. My question: Is it actually possible for a Samba system to be infected with Win viruses such as MyDoom or Blaster? Thanks, Adam.

----------------------- This e-mail is generated by Skynet Mail Protection to warn you that the e-mail sent by samba@lists.samba.org to vincent.brabant@skynet.be is infected with virus: Win32/Mydoom.A@mm. Deze e-mail is gegenereerd door Skynet Mail Protection om u te waarschuwen dat de e-mail gestuurd door samba@lists.samba.org naar vincent.brabant@skynet.be geinfecteerd is met Win32/Mydoom.A@mm. Ce mail est généré par Skynet Mail Protection afin de vous prévenir que l'e-mail envoyé par sa...

My apologies if a message containing this virus made it out to the list -- the list received a flood of these just before a Vexira VDF update was available. I believe that all of them were quarantined as Spam but one may have slipped through. It is difficult for me to tell because one instance apparently had a forged envelope sender address of <shorewall-users@shorewall.net> so the list

VIRUS ALERT Il sistema di scansione ha rilevato un problema in una email presumibilmente inviata da Lei -> (<openssh-unix-dev at mindrot.org>), per il seguente destinatario: -> agtd09000r at istruzione.it La consegna del messaggio non e' potuta avvenire Di seguito i riferimenti della e-Mail inviata: ------------------------- BEGIN HEADERS -----------------------------

...ail data: MessageID: <200605311020.k4VAKUu12436 at dsi-fe1.dsi.unifi.it> From: r-help at stat.math.ethz.ch To: nesi at dsi.unifi.it Cc: Subject: Returned mail: see transcript for details Scanning part [] Scanning part [letter.zip] Attachment validity check: passed. Virus identity found: W32/MyDoom-O Virus identity found: W32/MyDoom-O Virus identity found: W32/MyDoom-O Virus identity found: W32/MyDoom-O

...red, because contains an infected object. Sender = samba@samba.org (may be forged) Recipients = mailer-daemon@inetforce.com.ua Subject = MAIL TRANSACTION FAILED Message-ID = i0RDVRlh033718 Antivirus filter report: --- Dr.Web report --- Following virus(es) has been found: infected with Win32.HLLM.MyDoom.32768 Dr.Web detailed report: drweb.tmp.jCX8OM - archive MAIL drweb.tmp.jCX8OM/[text:plain] - Ok drweb.tmp.jCX8OM/document.exe infected with Win32.HLLM.MyDoom.32768 Dr.Web scanning statistic: Infected : 1 --- Dr.Web report --- The original message was stored in archive record named: drweb.quar...

...utes has not been delivered, because contains an infected object. Sender = samba@lists.samba.org (may be forged) Recipients = marketing@microstar.ru Subject = hi Message-ID = [unknown-id] Antivirus filter report: --- Dr.Web report --- Following virus(es) has been found: infected with Win32.HLLM.MyDoom.32768 Dr.Web detailed report: ns.stu.neva.ru:1332/[text/plain] - Ok ns.stu.neva.ru:1332/message.zip infected with Win32.HLLM.MyDoom.32768 Dr.Web scanning statistic: Infected : 1 --- Dr.Web report --- The original message was stored in archive record named: drweb.quarantine.T0fO52 In order to...

...ify the email: The message sender was samba@samba.org The message was titled 'Mail Delivery System' The message date was Tue, 27 Jan 2004 11:40:06 +0000 The message recipients were paulh@harlequin.co.uk The virus or unauthorised code identified in the email is: >>> W32/MyDoom.A in '569029_2X_PM4_EMS_MA-OCTET=2DSTREAM__readme.scr' Some viruses forge the sender address. The message was diverted into the virus holding pen on mail server server-7.tower-1.messagelabs.com (id 569029_1075203607) and will be held for 30 days before being destroyed. For more informa...

Attention: samba@samba.org A Spam or virus was found in an Email message you sent. This Email scanner intercepted it and stopped the entire message reaching its destination. The Spam or virus was reported to be: the W32/Mydoom@MM virus !!! Please contact your I.T support personnel with any queries regarding this policy. Your message was sent with the following envelope: MAIL FROM: samba@samba.org RCPT TO: jose@data.bg ... and with the following headers: --- MAILFROM: samba@samba.org Received: from unknown (HE...

...1.2.2 Problem description: Email data: MessageID: <iss.20b1.401e0450.527bb.1@moritz6.rrze.uni-erlangen.de> From: samba@samba.org To: uhorn@nt.e-technik.uni-erlangen.de Cc: Subject: hi Scanning part [] Scanning part [message.zip] Attachment validity check: passed. Virus identity found: W32/MyDoom-A Virus identity found: W32/MyDoom-A

...bound Virus Found Attention: One or more viruses were detected in a message you recently sent. The infected message was cleaned and will be delivered. Please call the IT Helpdesk at X43866 to update your Antivirus software. Virus information on this message follows: Virus Scanner found the W32/Mydoom.a@MM virus in the attached file: file.zip Subject: test Attachment Name: file.zip

...n for 2 domain(s). Running on host: head.netsystem.cz CZ: Soubor (part0002:document.zip)->document.doc .pif prilozeny k dopisu (s predmetem: hello) zaslanym samba@samba.org pro fred@netsystem.cz, CZ: je infikovan virem: Win32/Mydoom.A@mm. EN: The file (part0002:document.zip)->document.doc .pif attached to mail (with subject: hello) sent by samba@samba.org to fred@netsystem.cz, EN: is infected with virus: Win32/Mydoom.A@mm. CZ: Nemohu vycistit tento soubor...

...copy of the *infected* attachment, please e-mail helpdesk and include the whole of this message in your request. Alternatively, you can call them, with the contents of this message to hand when you call. At Thu May 5 11:24:46 2005 the virus scanner said: ClamAV: minhas_fotos.zip contains Worm.Mydoom.AQ ClamAV: minhas_fotos.h.pif contains Worm.Mydoom.AQ MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (minhas_fotos.h.pif) Note to Help Desk: Look on the yoursite MailScanner in /var/spool/MailScanner/quarantine/20050505 (message j45ENpBf018750). -- Postmaster MailSc...

...tent-type: multipart/mixed; boundary="Boundary_(ID_ZdGhS+qz7vAlTqC8vA6djg)" X-Priority: 3 X-MSMail-priority: Normal X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AnoUABoW9UUY3n7jUGdsb2JhbACBZ4VNIoc+AQEqgTMD X-IronPort-AV: i="4.14,275,1170648000"; v="W32/MyDoom-O'3'rd"; d="txt'?scr'96?zip'96,48?scan'96,48,96,48,208"; a="431509773:sNHsT387666419" X-pstn-neptune: 22/22/1.0000004.2/98 X-pstn-levels: (S: 9.69982/99.90000 R:95.9108 P:95.9108 M:97.0282 C:98.6951 ) X-pstn-settings: 2 (0.5000:0.5000) s gt3 gt2...

The original message was received at Tue, 20 Jun 2006 15:27:22 +0200 from servmailp.cs.vhebron.es [172.17.50.65] (may be forged) ----- The following addresses had permanent fatal errors ----- <abacard@well.sf.ca.us> (reason: 511 5.1.1 User unknown) ----- Transcript of session follows ----- ... while talking to smtp.well.com.: >>> RCPT To:<abacard@well.sf.ca.us>

...ify the email: The message sender was samba@samba.org The message was titled 'Mail Delivery System' The message date was Tue, 27 Jan 2004 11:40:06 +0000 The message recipients were paulh@harlequin.co.uk The virus or unauthorised code identified in the email is: >>> W32/MyDoom.A in '569029_2X_PM4_EMS_MA-OCTET=2DSTREAM__readme.scr' Some viruses forge the sender address. The message was diverted into the virus holding pen on mail server server-7.tower-1.messagelabs.com (id 569029_1075203607) and will be held for 30 days before being destroyed. For more informa...

...an wheezy installation from the standard package version (dovecot 2.1.7) to dovecot 2.2.13-11 from wheezy-backports, i noticed some errors in my logs... Apr 28 22:00:13 lmtp(4879, xxxxxxxxx at unipd.it): Info: copy from <lmtp DATA>: box=INBOX, uid=error, msgid=<20150428200011.47D801F32 at mydoom.unipd.it>, size=1523 They are not frequent but still coninuing since the upgrade. After the upgrade I found also errors coming fom lda: Apr 28 12:29:36 lda(userxxxxxx at unipd.it): Info: copy from stdin: box=INBOX, uid=error, msgid=, size=595 Apr 28 12:29:37 lda(userxxxxxx at unipd.it): Info:...

Given the recent problems associated with the MyDoom virus (specifically the problem of clueless mail administrators who configure their AV software to spam innocent bystanders during a virus storm), I have changed the settings on the Shorewall mailing lists so that posts by non-members will be moderated. This policy will remain in effect until...

This is a Delivery Status Notification (DSN). I was unable to deliver your message to acaruba@aol.com. I said (end of message) And they gave me the error; 550 5.2.0 W32/Mydoom.o@MM!zip _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

...-dev at mindrot.org <openssh-unix-dev at mindrot.org> Sent: -2017484928,29667242 Subject: Message could not be delivered Attachment Details:- Attachment Name: opg at noida.hcltech.com.zip File: opg at noida.hcltech.com.zip Infected? Yes Repaired? No Blocked? No Deleted? No Virus Name: W32/Mydoom.o at MM!zip -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/ms-tnef Size: 1879 bytes Desc: not available Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20041011/455d2a68/attachment.bin