Re: computer-go: Virus sent trough computer go-list.

[Michael D Richard <richard@xxxxxxxxxxxxxx>]

Hi,
	The copy sent to the list address bounced to me; the copy
to computer-go-outgoing went to everyone.  Unfortunately I don't
have control over that address.  I'll ask the majordomo-owner
about it.
	Just a note: this is an unmoderated list.  Anything small
enough (<40000 bytes,) and from an address subscribed to the list
will be distributed.

	Michael


> Hi there,
>
> I've just received a virus from the computer go mail server, so I thought
> I'd let you know, other might have received it too.
>
> The message had subject "Your password".  I guess the moderators wouldn't
> have let it through to the list, so I've incuded the header, in case someone
> wants to check why and how it got there.
>
> --- begin header ---
> Return-Path: <zhuang@xxxxxxxxxxxxxxxxx>
> Received: from darkwing.uoregon.edu ([128.223.142.13])
>           by tomts11-srv.bellnexxia.net
>           (InterMail vM.5.01.04.19 201-253-122-122-119-20020516) with ESMTP
>           id
> <20020715110842.KIRW26542.tomts11-srv.bellnexxia.net@xxxxxxxxxxxxxxxxx>;
>           Mon, 15 Jul 2002 07:08:42 -0400
> Received: from mail.ict.ac.cn ([159.226.39.4])
>  by darkwing.uoregon.edu (8.12.5/8.12.5) with SMTP id g6F9LRak000965
>  for <computer-go-outgoing@xxxxxxxxxxxxxxxxx>; Mon, 15 Jul 2002
> 02:21:28 -0700 (PDT)
> Date: Mon, 15 Jul 2002 02:21:27 -0700 (PDT)
> Message-Id: <200207150921.g6F9LRak000965@xxxxxxxxxxxxxxxxx>
> Received: (qmail 14310 invoked from network); 15 Jul 2002 09:02:26 -0000
> Received: from unknown (HELO AFRICA) (159.226.39.135)
>   by 159.226.39.4 with SMTP; 15 Jul 2002 09:02:26 -0000
> --- begin header ---
>
> This is the malfromed attachment that would have run on old/unpatched
> version of outlook :
>
> ---
> Content-Type: audio/x-midi;
>  name=decrypt-password.exe
> Content-Transfer-Encoding: base64
> Content-ID: <W8dqwq8q918213>
> ---
>
> Thanks.
> Jeff.
>