windows virus tracking
Dear all,
I know this email de facto does not belong to this mailing list and some of
you will swear "stop this spam".
But maybe a lot of you have the same problem as me: getting virusses from
someone who found you interesting enough to store your email-address but
being unable to warn the poor victim.
I am getting an awfull amount of emails infected with Win32/Swen.A@mm. via
my reasonably new email address.
In attempt to stop it, I've put some info about it on my homepage.
This recent message suspectingly points towards this mailinglist and
suggests that one of the readers might have an infected computer.
If anyone of you are running ms-windows please check all your disks with
either stinger from mcafee : http://vil.nai.com/vil/stinger/ or swen
removal tool from symantec:
http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.removal.tool.html
best regards,
Joost Ringoot
email: joost@ringoot.org
website: http://joost.ringoot.org/
----- Original Message -----
From: "AntiVirus Xnet" <AVAdmin@xnet.ro>
To: <ccontavalli@debian.org>; <davidw@dedasys.com>; <ccontavalli@libero.it>;
<fabbione@fabbione.net>; <adriano.archetti@tiscali.it>;
<frankie@debian.org>; <csurchi@debian.org>; <ziggefjern@privat.dk>;
<sgunderson@bigfoot.com>; <sebastian.ley@mmweg.rwth-aachen.de>;
<gaudenz@soziologie.ch>; <ari@arisoft.fi>; <tsauter@debian.org>;
<waldi@debian.org>; <ftpmaster@debian.org>; <jozeph@globalmedia.com.br>;
<installer@ftp-master.debian.org>; <owner@bugs.debian.org>;
<pere@debian.org>; <ggandara@uocra.org>; <212499@bugs.debian.org>;
<195704@bugs.debian.org>; <211246@bugs.debian.org>;
<210968@bugs.debian.org>; <187135@bugs.debian.org>; <stappers@stappers.nl>;
<pasc@debian.org>; <linux4michelle@freenet.de>; <mlang@debian.org>;
<brl@pcpool00.mathematik.uni-freiburg.de>; <joey@infodrom.org>;
<seb128@debian.org>; <barbier@linuxfr.org>; <gemorin@debian.org>;
<vorlon@netexpress.net>; <kmuto@debian.org>; <holle@ackw.de>;
<toff1@cox.net>; <kraai@alumni.cmu.edu>; <umdanie8@cc.umanitoba.ca>;
<martin@strakt.com>; <bug1@optushome.com.au>; <joost@ringoot.org>;
<bartek@klepisko.eu.org>; <christoph.walther@t-systems.com>;
<joeyh@debian.org>; <pere@hungry.com>; <levi@bard.sytes.net>;
<tim.vandermeersch@pandora.be>; <212920@bugs.debian.org>;
<john@nixnuts.net>; <md@linux.it>; <vetsel.patrice@wanadoo.fr>;
<debian-boot@lists.debian.org>; <212922@bugs.debian.org>;
<212981@bugs.debian.org>; <rhirst@linuxcare.com>; <simon@nuit.ca>;
<212986@bugs.debian.org>; <213013@bugs.debian.org>;
<184857@bugs.debian.org>; <213015@bugs.debian.org>;
<213014@bugs.debian.org>; <dan@mirrorlynx.com>; <haaner@gmx.de>;
<erbenson@alaska.net>; <manty@manty.net>; <213016@bugs.debian.org>;
<webmaster@foellmar.de>; <mjg59@srcf.ucam.org>; <andrel@u.arizona.edu>;
<211063@bugs.debian.org>; <laifeng@0451.com>; <payonline@263.net>;
<edmundo@rano.org>; <debacle@debian.org>;
<xtifr@ny-niagara4a-30.buf.adelphia.net>
Sent: Monday, October 06, 2003 4:50 AM
Subject: AntiVirus Alert!
>
>
> Fisierul (part0000:)->(IFRAME0000) atasat email-ului trimis de catre
icaius@xnet.ro pentru
> ccontavalli@debian.org, davidw@dedasys.com, ccontavalli@libero.it,
fabbione@fabbione.net, adriano.archetti@tiscali.it, frankie@debian.org,
csurchi@debian.org, ziggefjern@privat.dk, sgunderson@bigfoot.com,
sebastian.ley@mmweg.rwth-aachen.de, gaudenz@soziologie.ch, ari@arisoft.fi,
tsauter@debian.org, waldi@debian.org, ftpmaster@debian.org,
jozeph@globalmedia.com.br, installer@ftp-master.debian.org,
owner@bugs.debian.org, pere@debian.org, ggandara@uocra.org,
212499@bugs.debian.org, 195704@bugs.debian.org, 211246@bugs.debian.org,
210968@bugs.debian.org, 187135@bugs.debian.org, stappers@stappers.nl,
pasc@debian.org, linux4michelle@freenet.de, mlang@debian.org,
brl@pcpool00.mathematik.uni-freiburg.de, joey@infodrom.org,
seb128@debian.org, barbier@linuxfr.org, gemorin@debian.org,
vorlon@netexpress.net, kmuto@debian.org, holle@ackw.de, toff1@cox.net,
kraai@alumni.cmu.edu, umdanie8@cc.umanitoba.ca, martin@strakt.com,
bug1@optushome.com.au, joost@ringoot.org, bartek@klepisko.eu.org, c!
> hristoph.walther@t-systems.com, joeyh@debian.org, pere@hungry.com,
levi@bard.sytes.net, tim.vandermeersch@pandora.be, 212920@bugs.debian.org,
john@nixnuts.net, md@linux.it, vetsel.patrice@wanadoo.fr,
debian-boot@lists.debian.org, 212922@bugs.debian.org,
212981@bugs.debian.org, rhirst@linuxcare.com, simon@nuit.ca,
212986@bugs.debian.org, 213013@bugs.debian.org, 184857@bugs.debian.org,
213015@bugs.debian.org, 213014@bugs.debian.org, dan@mirrorlynx.com,
haaner@gmx.de, erbenson@alaska.net, manty@manty.net, 213016@bugs.debian.org,
webmaster@foellmar.de, mjg59@srcf.ucam.org, andrel@u.arizona.edu,
211063@bugs.debian.org, laifeng@0451.com, payonline@263.net,
edmundo@rano.org, debacle@debian.org, xtifr@ny-niagara4a-30.buf.adelphia.net
(cu subiectul: Notice) este infectat cu virusul: HTML/IFrame_Exploit*.
> The file (part0000:)->(IFRAME0000) attached to mail (with subject: Notice)
sent by
> icaius@xnet.ro to ccontavalli@debian.org, davidw@dedasys.com,
ccontavalli@libero.it, fabbione@fabbione.net, adriano.archetti@tiscali.it,
frankie@debian.org, csurchi@debian.org, ziggefjern@privat.dk,
sgunderson@bigfoot.com, sebastian.ley@mmweg.rwth-aachen.de,
gaudenz@soziologie.ch, ari@arisoft.fi, tsauter@debian.org, waldi@debian.org,
ftpmaster@debian.org, jozeph@globalmedia.com.br,
installer@ftp-master.debian.org, owner@bugs.debian.org, pere@debian.org,
ggandara@uocra.org, 212499@bugs.debian.org, 195704@bugs.debian.org,
211246@bugs.debian.org, 210968@bugs.debian.org, 187135@bugs.debian.org,
stappers@stappers.nl, pasc@debian.org, linux4michelle@freenet.de,
mlang@debian.org, brl@pcpool00.mathematik.uni-freiburg.de,
joey@infodrom.org, seb128@debian.org, barbier@linuxfr.org,
gemorin@debian.org, vorlon@netexpress.net, kmuto@debian.org, holle@ackw.de,
toff1@cox.net, kraai@alumni.cmu.edu, umdanie8@cc.umanitoba.ca,
martin@strakt.com, bug1@optushome.com.au, joost@ringoot.org, bartek@!
> klepisko.eu.org, christoph.walther@t-systems.com, joeyh@debian.org,
pere@hungry.com, levi@bard.sytes.net, tim.vandermeersch@pandora.be,
212920@bugs.debian.org, john@nixnuts.net, md@linux.it,
vetsel.patrice@wanadoo.fr, debian-boot@lists.debian.org,
212922@bugs.debian.org, 212981@bugs.debian.org, rhirst@linuxcare.com,
simon@nuit.ca, 212986@bugs.debian.org, 213013@bugs.debian.org,
184857@bugs.debian.org, 213015@bugs.debian.org, 213014@bugs.debian.org,
dan@mirrorlynx.com, haaner@gmx.de, erbenson@alaska.net, manty@manty.net,
213016@bugs.debian.org, webmaster@foellmar.de, mjg59@srcf.ucam.org,
andrel@u.arizona.edu, 211063@bugs.debian.org, laifeng@0451.com,
payonline@263.net, edmundo@rano.org, debacle@debian.org,
xtifr@ny-niagara4a-30.buf.adelphia.net is infected with virus:
HTML/IFrame_Exploit*.
>
> Este recomandat sa nu utilizati acest fisier.
> It is highly recommended not to use this file.
>
> Fisierul (part0001:aada.exe) atasat email-ului trimis de catre
icaius@xnet.ro pentru
> ccontavalli@debian.org, davidw@dedasys.com, ccontavalli@libero.it,
fabbione@fabbione.net, adriano.archetti@tiscali.it, frankie@debian.org,
csurchi@debian.org, ziggefjern@privat.dk, sgunderson@bigfoot.com,
sebastian.ley@mmweg.rwth-aachen.de, gaudenz@soziologie.ch, ari@arisoft.fi,
tsauter@debian.org, waldi@debian.org, ftpmaster@debian.org,
jozeph@globalmedia.com.br, installer@ftp-master.debian.org,
owner@bugs.debian.org, pere@debian.org, ggandara@uocra.org,
212499@bugs.debian.org, 195704@bugs.debian.org, 211246@bugs.debian.org,
210968@bugs.debian.org, 187135@bugs.debian.org, stappers@stappers.nl,
pasc@debian.org, linux4michelle@freenet.de, mlang@debian.org,
brl@pcpool00.mathematik.uni-freiburg.de, joey@infodrom.org,
seb128@debian.org, barbier@linuxfr.org, gemorin@debian.org,
vorlon@netexpress.net, kmuto@debian.org, holle@ackw.de, toff1@cox.net,
kraai@alumni.cmu.edu, umdanie8@cc.umanitoba.ca, martin@strakt.com,
bug1@optushome.com.au, joost@ringoot.org, bartek@klepisko.eu.org, c!
> hristoph.walther@t-systems.com, joeyh@debian.org, pere@hungry.com,
levi@bard.sytes.net, tim.vandermeersch@pandora.be, 212920@bugs.debian.org,
john@nixnuts.net, md@linux.it, vetsel.patrice@wanadoo.fr,
debian-boot@lists.debian.org, 212922@bugs.debian.org,
212981@bugs.debian.org, rhirst@linuxcare.com, simon@nuit.ca,
212986@bugs.debian.org, 213013@bugs.debian.org, 184857@bugs.debian.org,
213015@bugs.debian.org, 213014@bugs.debian.org, dan@mirrorlynx.com,
haaner@gmx.de, erbenson@alaska.net, manty@manty.net, 213016@bugs.debian.org,
webmaster@foellmar.de, mjg59@srcf.ucam.org, andrel@u.arizona.edu,
211063@bugs.debian.org, laifeng@0451.com, payonline@263.net,
edmundo@rano.org, debacle@debian.org, xtifr@ny-niagara4a-30.buf.adelphia.net
(cu subiectul: Notice) este infectat cu virusul: Win32/Swen.A@mm.
> The file (part0001:aada.exe) attached to mail (with subject: Notice) sent
by
> icaius@xnet.ro to ccontavalli@debian.org, davidw@dedasys.com,
ccontavalli@libero.it, fabbione@fabbione.net, adriano.archetti@tiscali.it,
frankie@debian.org, csurchi@debian.org, ziggefjern@privat.dk,
sgunderson@bigfoot.com, sebastian.ley@mmweg.rwth-aachen.de,
gaudenz@soziologie.ch, ari@arisoft.fi, tsauter@debian.org, waldi@debian.org,
ftpmaster@debian.org, jozeph@globalmedia.com.br,
installer@ftp-master.debian.org, owner@bugs.debian.org, pere@debian.org,
ggandara@uocra.org, 212499@bugs.debian.org, 195704@bugs.debian.org,
211246@bugs.debian.org, 210968@bugs.debian.org, 187135@bugs.debian.org,
stappers@stappers.nl, pasc@debian.org, linux4michelle@freenet.de,
mlang@debian.org, brl@pcpool00.mathematik.uni-freiburg.de,
joey@infodrom.org, seb128@debian.org, barbier@linuxfr.org,
gemorin@debian.org, vorlon@netexpress.net, kmuto@debian.org, holle@ackw.de,
toff1@cox.net, kraai@alumni.cmu.edu, umdanie8@cc.umanitoba.ca,
martin@strakt.com, bug1@optushome.com.au, joost@ringoot.org, bartek@!
> klepisko.eu.org, christoph.walther@t-systems.com, joeyh@debian.org,
pere@hungry.com, levi@bard.sytes.net, tim.vandermeersch@pandora.be,
212920@bugs.debian.org, john@nixnuts.net, md@linux.it,
vetsel.patrice@wanadoo.fr, debian-boot@lists.debian.org,
212922@bugs.debian.org, 212981@bugs.debian.org, rhirst@linuxcare.com,
simon@nuit.ca, 212986@bugs.debian.org, 213013@bugs.debian.org,
184857@bugs.debian.org, 213015@bugs.debian.org, 213014@bugs.debian.org,
dan@mirrorlynx.com, haaner@gmx.de, erbenson@alaska.net, manty@manty.net,
213016@bugs.debian.org, webmaster@foellmar.de, mjg59@srcf.ucam.org,
andrel@u.arizona.edu, 211063@bugs.debian.org, laifeng@0451.com,
payonline@263.net, edmundo@rano.org, debacle@debian.org,
xtifr@ny-niagara4a-30.buf.adelphia.net is infected with virus:
Win32/Swen.A@mm.
>
> Este recomandat sa nu utilizati acest fisier.
> It is highly recommended not to use this file.
>
>
>
> -------------------------------------------------------
> Xnet scaneaza automat toate mesajele impotriva virusilor folosind RAV
AntiVirus.
> Xnet automatically scans all messages for viruses using RAV AntiVirus.
>
> Nota: RAV AntiVirus poate sa nu detecteze toti virusii noi sau toate
variantele lor.
> Va rugam sa luati in considerare ca exista un risc de fiecare data cand
deschideti
> fisiere atasate si ca MobiFon nu este responsabila pentru nici un
prejudiciu cauzat
> de virusi.
>
> Disclaimer: RAV AntiVirus may not be able to detect all new viruses and
variants.
> Please be aware that there is a risk involved whenever opening e-mail
attachments
> to your computer and that MobiFon is not responsible for any damages
caused by
> viruses.
>
>
>
Reply to: