Skip to content

virus

2 messages · U-E59264-Osman F Buyukisik, Martin Maechler

Original
U-E59264-Osman F Buyukisik
# 
To win*/NT users:
I just recieved a mail from r-help with a virus attachment. I am on
an unix system but our mail server deleted the message anyways. here it is:

Received: by stat.math.ethz.ch (8.9.1/8.9.1) id RAA27614
        for r-help-gang-use; Wed, 10 Jan 2001 17:01:56 +0100 (MET)
Received: (from daemon at localhost)
        by stat.math.ethz.ch (8.9.1/8.9.1) id RAA27412
        for <r-help at stat.math.ethz.ch>; Wed, 10 Jan 2001 17:01:28 +0100 (MET)
Received: from UNKNOWN(203.172.11.25), claiming to be "monumento.info.com.ph"
 via SMTP by hypatia, id smtpdAAAa006fx; Wed Jan 10 17:01:17 2001
Received: from guest (info3-167.info.com.ph [202.163.242.167])
        by monumento.info.com.ph (8.9.3/8.9.3) with SMTP id AAA21587
        for <r-help at stat.math.ethz.ch>; Thu, 11 Jan 2001 00:01:35 +0800 (HKT)
From: toots at info.com.ph
Date: Thu, 11 Jan 2001 00:01:35 +0800 (HKT)
Message-Id: <200101101601.AAA21587 at monumento.info.com.ph>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="==i3.9.0oisdboibsd((kncd"
Sender: owner-r-help at stat.math.ethz.ch
Precedence: bulk

--==i3.9.0oisdboibsd((kncd
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

------------------  Virus Warning Message (on mailrelay03-geids)

Found virus TROJ_MTX.A in file METALLICA_SONG.MP3.pif
The file is deleted.

---------------------------------------------------------


--==i3.9.0oisdboibsd((kncd
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


------------------  Virus Warning Message (on mailrelay03-geids)

METALLICA_SONG.MP3.pif is removed from here because it contains a virus.

-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
r-help mailing list -- Read http://www.ci.tuwien.ac.at/~hornik/R/R-FAQ.html
Send "info", "help", or "[un]subscribe"
(in the "body", not the subject !)  To: r-help-request at stat.math.ethz.ch
_._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._
Martin Maechler
# 
Osman> To win*/NT users: I just recieved a mail from r-help with a
    Osman> virus attachment. I am on an unix system but our mail server
    Osman> deleted the message anyways. here it is:

    ...........

    Osman> ------------------ Virus Warning Message (on mailrelay03-geids)

    Osman> Found virus TROJ_MTX.A in file METALLICA_SONG.MP3.pif The file
    Osman> is deleted.

    Osman> ---------------------------------------------------------

    ..........

    Osman> ------------------ Virus Warning Message (on mailrelay03-geids)

    Osman> METALLICA_SONG.MP3.pif is removed from here because it contains
    Osman> a virus.

Thanks a lot Osman!

The bad thing is that it was sent misusing a regular R-help user's E-mail,
namely
	"Jose Ramon G. Albert" <toots at info.com.ph>

[[ Jose,  your computer is probably infected !!! ]]

So, even if R-help would only accept E-mail from regular subscribers,
this would still have gone through...

A very drastic measure would be to  forbid attachments completely....
Any other ideas?

Your list maintainer :

Martin Maechler <maechler at stat.math.ethz.ch>	http://stat.ethz.ch/~maechler/
Seminar fuer Statistik, ETH-Zentrum  LEO D10	Leonhardstr. 27
ETH (Federal Inst. Technology)	8092 Zurich	SWITZERLAND
phone: x-41-1-632-3408		fax: ...-1228			<><
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-
r-help mailing list -- Read http://www.ci.tuwien.ac.at/~hornik/R/R-FAQ.html
Send "info", "help", or "[un]subscribe"
(in the "body", not the subject !)  To: r-help-request at stat.math.ethz.ch
_._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._