HP3000-L Archives

December 2001, Week 3

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Mark Bixby <[log in to unmask]>
Reply To:
Mark Bixby <[log in to unmask]>
Date:
Tue, 18 Dec 2001 11:19:50 -0800
Content-Type:
text/plain
Parts/Attachments:
text/plain (28 lines)
Hi HP3000-L,

I thought I would warn you all that virus messages are currently being sent
with a forged From: address of [log in to unmask] from a cable modem user at
rogers.com in Canada.

My first tip off was a burst of about 20 bounce messages from people I haven't
e-mailed saying my recent e-mail was infected by Nimda.

All of my Windows PCs scan clean using the latest versions of Norton.  My
upstream mail server shows no unexplained outbound e-mail traffic.

The Received: headers of the bounces all show the same cable modem machine on
the rogers.com network.  I have just e-mailed [log in to unmask], but that
bounced saying it was over-quota.  Methinks that probably many other forgery
victims have swamped this mailbox with complaints.

If you should receive any infected messages allegedly from me, please preserve
all headers and cut/paste me a copy.

Thanks...
--
[log in to unmask]
Remainder of .sig suppressed to conserve scarce California electrons...

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2