Bug#211461: SFK AntiVirus scan results
-----------------------
This e-mail is generated by the ss1.kyrnet.kg mail server to warn you that the e-mail
sent by unaryn@users.kyrnet.kg to owner@bugs.debian.org, frank@lichtenheld.de, tbm@cyrius.com, bas@debian.org, cjwatson@debian.org, aba@not.so.argh.org, tillea@rki.de, 211461@bugs.debian.org, gmailrobot@rocketmail.net, lolando@debian.org, martin@piware.de, joy@srce.hr, 110785@bugs.debian.org, 120553@bugs.debian.org, debian-qa@lists.debian.org, mquinson@ens-lyon.fr, abecy2001@yahoo.co.uk, ametzler@downhill.at.eu.org, matthew@sel.cam.ac.uk, zeratul2@wanadoo.es, blp@cs.stanford.edu, joe@nahmias.net, *z*@post.dk, linesnuden@hotmail.com, hexata@hansen.mail.dk, satanc@softhome.net, removethislau@pc.dk, markgazel@hotmail.com, cabola@post7.tele.dk, jdogh001@sneakemail.com, madsen-nomail@nomails.dk, nettesnetpost@hotmail.com, sil@ccieurope.com, palle.jensen@galprofessor.com, albert@einstein.iq, hojben@solsortc.dk, easyliving@ofir.dk, news@bennynissen.dk, speg-fjern@mail.dk, ae@tdcadsl.dk, enricoool@hotmail.com, jannieogfjernjens@hansen.mail.dk, leif@hoexbroe.dk, 123@ishoejby.dk, cr@ca
rben.dk, 2103rh@edu.esh.dk, skodkontoen@hotmail.com, doughnutnot@oliwer.dk, runwest@post6.tele.dk, volds@mail.dk, bennyfly-sletdette-@adslhome.dk, andvalen@post.tele.dk, nikihansen@hotmail.com, nuclear75@hotmail.com, fjernes_esben@mail.tele.dk, ninahald@xxxprivate.dk, myfischer87@get2net.dk, fow@wormos.dk, anders@andersh.fjerndette.dk, cholck@malling.com, j.nellemann@ofir.dk, jangarfield@vennike.dk, saddam@hussein.iraq, hmadsen@hotmail.com, waste@tdcspace.dk, jesper@cbn.dk, hans_fjernes_@it.invalid, musicaze@hotmail.com, mail@in.valid, fjernkwh@foxylady.dk, skjelm@hotmail.com, kim@the-coffeeshop.dk, dsl89983@vip.cybercity.dk, rwr@post6.tele.dk, invalid@invalid.invalid is infected with virus: HTML/IFrame_Exploit*.
Please contact your system administrator for further information.
If you are the sender:
-------------------
The scanned e-mail has your address in the <From> header field. Either your
computer is infected or someone's computer having your e-mail address in
the address book has been infected.
(Please note that some viruses are sending e-mails directly from your computer.
Our advise is to check your computer using an up-to-date antivirus product).
If you are the receiver:
---------------------
Please contact the sender: very probably he/she doesn't know he/she has a computer virus.
Actions taken for the infected files:
-------------------------------------
The infected file was saved to quarantine with name: 1064985863-RAV22072.
The file (part0000:)->(IFRAME0000) attached to mail (with subject:Undeliverable Message) sent by unaryn@users.kyrnet.kg to owner@bugs.debian.org, frank@lichtenheld.de, tbm@cyrius.com, bas@debian.org, cjwatson@debian.org, aba@not.so.argh.org, tillea@rki.de, 211461@bugs.debian.org, gmailrobot@rocketmail.net, lolando@debian.org, martin@piware.de, joy@srce.hr, 110785@bugs.debian.org, 120553@bugs.debian.org, debian-qa@lists.debian.org, mquinson@ens-lyon.fr, abecy2001@yahoo.co.uk, ametzler@downhill.at.eu.org, matthew@sel.cam.ac.uk, zeratul2@wanadoo.es, blp@cs.stanford.edu, joe@nahmias.net, *z*@post.dk, linesnuden@hotmail.com, hexata@hansen.mail.dk, satanc@softhome.net, removethislau@pc.dk, markgazel@hotmail.com, cabola@post7.tele.dk, jdogh001@sneakemail.com, madsen-nomail@nomails.dk, nettesnetpost@hotmail.com, sil@ccieurope.com, palle.jensen@galprofessor.com, albert@einstein.iq, hojben@solsortc.dk, easyliving@ofir.dk, news@bennynissen.dk, speg-fjern@mail.dk, ae@tdcadsl.dk, enricooo
l@hotmail.com, jannieogfjernjens@hansen.mail.dk, leif@hoexbroe.dk, 123@ishoejby.dk, cr@carben.dk, 2103rh@edu.esh.dk, skodkontoen@hotmail.com, doughnutnot@oliwer.dk, runwest@post6.tele.dk, volds@mail.dk, bennyfly-sletdette-@adslhome.dk, andvalen@post.tele.dk, nikihansen@hotmail.com, nuclear75@hotmail.com, fjernes_esben@mail.tele.dk, ninahald@xxxprivate.dk, myfischer87@get2net.dk, fow@wormos.dk, anders@andersh.fjerndette.dk, cholck@malling.com, j.nellemann@ofir.dk, jangarfield@vennike.dk, saddam@hussein.iraq, hmadsen@hotmail.com, waste@tdcspace.dk, jesper@cbn.dk, hans_fjernes_@it.invalid, musicaze@hotmail.com, mail@in.valid, fjernkwh@foxylady.dk, skjelm@hotmail.com, kim@the-coffeeshop.dk, dsl89983@vip.cybercity.dk, rwr@post6.tele.dk, invalid@invalid.invalid
is infected with virus: HTML/IFrame_Exploit*.
Cannot clean this file.
The file was successfully deleted by SFK-AntiVirus.
The file (part0001:afudrbnv.exe) attached to mail (with subject:Undeliverable Message) sent by unaryn@users.kyrnet.kg to owner@bugs.debian.org, frank@lichtenheld.de, tbm@cyrius.com, bas@debian.org, cjwatson@debian.org, aba@not.so.argh.org, tillea@rki.de, 211461@bugs.debian.org, gmailrobot@rocketmail.net, lolando@debian.org, martin@piware.de, joy@srce.hr, 110785@bugs.debian.org, 120553@bugs.debian.org, debian-qa@lists.debian.org, mquinson@ens-lyon.fr, abecy2001@yahoo.co.uk, ametzler@downhill.at.eu.org, matthew@sel.cam.ac.uk, zeratul2@wanadoo.es, blp@cs.stanford.edu, joe@nahmias.net, *z*@post.dk, linesnuden@hotmail.com, hexata@hansen.mail.dk, satanc@softhome.net, removethislau@pc.dk, markgazel@hotmail.com, cabola@post7.tele.dk, jdogh001@sneakemail.com, madsen-nomail@nomails.dk, nettesnetpost@hotmail.com, sil@ccieurope.com, palle.jensen@galprofessor.com, albert@einstein.iq, hojben@solsortc.dk, easyliving@ofir.dk, news@bennynissen.dk, speg-fjern@mail.dk, ae@tdcadsl.dk, enricoool@
hotmail.com, jannieogfjernjens@hansen.mail.dk, leif@hoexbroe.dk, 123@ishoejby.dk, cr@carben.dk, 2103rh@edu.esh.dk, skodkontoen@hotmail.com, doughnutnot@oliwer.dk, runwest@post6.tele.dk, volds@mail.dk, bennyfly-sletdette-@adslhome.dk, andvalen@post.tele.dk, nikihansen@hotmail.com, nuclear75@hotmail.com, fjernes_esben@mail.tele.dk, ninahald@xxxprivate.dk, myfischer87@get2net.dk, fow@wormos.dk, anders@andersh.fjerndette.dk, cholck@malling.com, j.nellemann@ofir.dk, jangarfield@vennike.dk, saddam@hussein.iraq, hmadsen@hotmail.com, waste@tdcspace.dk, jesper@cbn.dk, hans_fjernes_@it.invalid, musicaze@hotmail.com, mail@in.valid, fjernkwh@foxylady.dk, skjelm@hotmail.com, kim@the-coffeeshop.dk, dsl89983@vip.cybercity.dk, rwr@post6.tele.dk, invalid@invalid.invalid
contains suspicious code.
The file was copied to quarantine with name: ecd2341f.qto.
------------------------
this is a copy of the e-mail header:
Received: from 166.227.dialup.kyrnet.kg ([195.254.166.227] helo=nzsfl)
by ss1.kyrnet.kg with smtp (Exim 4.10)
id 1A4ZSt-0005jM-00; Wed, 01 Oct 2003 11:23:55 +0600
RAV AntiVirus for SunOS sparc version: 8.4.0 (snapshot-20020919)
Copyright (c) since 1995 GeCAD The Software Company. All rights reserved.
30 more days to evaluate.
Running on host: ss1.kyrnet.kg
Scan engine 8.11 for sparc.
Last update: Tue, 19 Aug 2003 13:32:18 +06
Scanning for 81518 malwares (viruses, trojans and worms).
You can download a free 30-day fully functional trial version of RAV AntiVirus v8
from: http://www.ravantivirus.com
Reply to: