Bug#212183: SFK AntiVirus scan results
-----------------------
This e-mail is generated by the ss1.kyrnet.kg mail server to warn you that the e-mail
sent by unaryn@users.kyrnet.kg to anders@netinsight.se, rmh@debian.org, christian@kesselheim.com, 203834@bugs.debian.org, 207743@bugs.debian.org, 212154@bugs.debian.org, 212048@bugs.debian.org, 212183@bugs.debian.org, ckesselh@debian.org, 212186@bugs.debian.org, meskes@debian.org, e9325116@stud4.tuwien.ac.at, jdthood@yahoo.co.uk, frankie@debian.org, gotom@debian.or.jp, branden@debian.org, ricky_clarkson@yahoo.com, erwan@mas.nom.fr, 210514@bugs.debian.org, 208025@bugs.debian.org, 189964@bugs.debian.org, 212198@bugs.debian.org, 212209@bugs.debian.org, robin@debian.org, shawn@garbett.org, tsauter@debian.org, mvogt@acm.org, lamont@security.hp.com, 197157@bugs.debian.org, 207749@bugs.debian.org, 210808@bugs.debian.org, 212239@bugs.debian.org, 210808-quiet@bugs.debian.org, 212241@bugs.debian.org, gwolf@gwolf.cx, dirtbird@ntlworld.com, 208775@bugs.debian.org, 212248@bugs.debian.org, 211139@bugs.debian.org, 205471@bugs.debian.org, 212263@bugs.debian.org, 212268@bugs.debian.org, 21226
1@bugs.debian.org, 212265@bugs.debian.org, 212270@bugs.debian.org, 212262@bugs.debian.org, 212266@bugs.debian.org, 212269@bugs.debian.org, anthony@derobert.net, corsipo@comcast.net, acid_man@web.de, 212272@bugs.debian.org, 212281@bugs.debian.org, 212280@bugs.debian.org, 212186-quiet@bugs.debian.org, 212287@bugs.debian.org, 212288@bugs.debian.org, 212286@bugs.debian.org, 212289@bugs.debian.org, 212295@bugs.debian.org, 212294@bugs.debian.org, 212292@bugs.debian.org, 212296@bugs.debian.org, 212293@bugs.debian.org, 212290@bugs.debian.org, 212297@bugs.debian.org, 212298@bugs.debian.org, vorlon@debian.org, bubulle@debian.org, mgoetze@mgoetze.net is infected with virus: HTML/IFrame_Exploit*.
Please contact your system administrator for further information.
If you are the sender:
-------------------
The scanned e-mail has your address in the <From> header field. Either your
computer is infected or someone's computer having your e-mail address in
the address book has been infected.
(Please note that some viruses are sending e-mails directly from your computer.
Our advise is to check your computer using an up-to-date antivirus product).
If you are the receiver:
---------------------
Please contact the sender: very probably he/she doesn't know he/she has a computer virus.
Actions taken for the infected files:
-------------------------------------
The infected file was saved to quarantine with name: 1065085490-RAV24957.
The file (part0000:)->(IFRAME0000) attached to mail (with subject:Announcement) sent by unaryn@users.kyrnet.kg to anders@netinsight.se, rmh@debian.org, christian@kesselheim.com, 203834@bugs.debian.org, 207743@bugs.debian.org, 212154@bugs.debian.org, 212048@bugs.debian.org, 212183@bugs.debian.org, ckesselh@debian.org, 212186@bugs.debian.org, meskes@debian.org, e9325116@stud4.tuwien.ac.at, jdthood@yahoo.co.uk, frankie@debian.org, gotom@debian.or.jp, branden@debian.org, ricky_clarkson@yahoo.com, erwan@mas.nom.fr, 210514@bugs.debian.org, 208025@bugs.debian.org, 189964@bugs.debian.org, 212198@bugs.debian.org, 212209@bugs.debian.org, robin@debian.org, shawn@garbett.org, tsauter@debian.org, mvogt@acm.org, lamont@security.hp.com, 197157@bugs.debian.org, 207749@bugs.debian.org, 210808@bugs.debian.org, 212239@bugs.debian.org, 210808-quiet@bugs.debian.org, 212241@bugs.debian.org, gwolf@gwolf.cx, dirtbird@ntlworld.com, 208775@bugs.debian.org, 212248@bugs.debian.org, 211139@bugs.debian.or
g, 205471@bugs.debian.org, 212263@bugs.debian.org, 212268@bugs.debian.org, 212261@bugs.debian.org, 212265@bugs.debian.org, 212270@bugs.debian.org, 212262@bugs.debian.org, 212266@bugs.debian.org, 212269@bugs.debian.org, anthony@derobert.net, corsipo@comcast.net, acid_man@web.de, 212272@bugs.debian.org, 212281@bugs.debian.org, 212280@bugs.debian.org, 212186-quiet@bugs.debian.org, 212287@bugs.debian.org, 212288@bugs.debian.org, 212286@bugs.debian.org, 212289@bugs.debian.org, 212295@bugs.debian.org, 212294@bugs.debian.org, 212292@bugs.debian.org, 212296@bugs.debian.org, 212293@bugs.debian.org, 212290@bugs.debian.org, 212297@bugs.debian.org, 212298@bugs.debian.org, vorlon@debian.org, bubulle@debian.org, mgoetze@mgoetze.net
is infected with virus: HTML/IFrame_Exploit*.
Cannot clean this file.
The file was successfully deleted by SFK-AntiVirus.
The file (part0001:epttyne.exe) attached to mail (with subject:Announcement) sent by unaryn@users.kyrnet.kg to anders@netinsight.se, rmh@debian.org, christian@kesselheim.com, 203834@bugs.debian.org, 207743@bugs.debian.org, 212154@bugs.debian.org, 212048@bugs.debian.org, 212183@bugs.debian.org, ckesselh@debian.org, 212186@bugs.debian.org, meskes@debian.org, e9325116@stud4.tuwien.ac.at, jdthood@yahoo.co.uk, frankie@debian.org, gotom@debian.or.jp, branden@debian.org, ricky_clarkson@yahoo.com, erwan@mas.nom.fr, 210514@bugs.debian.org, 208025@bugs.debian.org, 189964@bugs.debian.org, 212198@bugs.debian.org, 212209@bugs.debian.org, robin@debian.org, shawn@garbett.org, tsauter@debian.org, mvogt@acm.org, lamont@security.hp.com, 197157@bugs.debian.org, 207749@bugs.debian.org, 210808@bugs.debian.org, 212239@bugs.debian.org, 210808-quiet@bugs.debian.org, 212241@bugs.debian.org, gwolf@gwolf.cx, dirtbird@ntlworld.com, 208775@bugs.debian.org, 212248@bugs.debian.org, 211139@bugs.debian.org,
205471@bugs.debian.org, 212263@bugs.debian.org, 212268@bugs.debian.org, 212261@bugs.debian.org, 212265@bugs.debian.org, 212270@bugs.debian.org, 212262@bugs.debian.org, 212266@bugs.debian.org, 212269@bugs.debian.org, anthony@derobert.net, corsipo@comcast.net, acid_man@web.de, 212272@bugs.debian.org, 212281@bugs.debian.org, 212280@bugs.debian.org, 212186-quiet@bugs.debian.org, 212287@bugs.debian.org, 212288@bugs.debian.org, 212286@bugs.debian.org, 212289@bugs.debian.org, 212295@bugs.debian.org, 212294@bugs.debian.org, 212292@bugs.debian.org, 212296@bugs.debian.org, 212293@bugs.debian.org, 212290@bugs.debian.org, 212297@bugs.debian.org, 212298@bugs.debian.org, vorlon@debian.org, bubulle@debian.org, mgoetze@mgoetze.net
contains suspicious code.
The file was copied to quarantine with name: 1ae86aa4.qto.
------------------------
this is a copy of the e-mail header:
Received: from 166.236.dialup.kyrnet.kg ([195.254.166.236] helo=gxjsgrvr)
by ss1.kyrnet.kg with smtp (Exim 4.10)
id 1A4zNo-0006UT-00; Thu, 02 Oct 2003 15:04:24 +0600
RAV AntiVirus for SunOS sparc version: 8.4.0 (snapshot-20020919)
Copyright (c) since 1995 GeCAD The Software Company. All rights reserved.
30 more days to evaluate.
Running on host: ss1.kyrnet.kg
Scan engine 8.11 for sparc.
Last update: Tue, 19 Aug 2003 13:32:18 +06
Scanning for 81518 malwares (viruses, trojans and worms).
You can download a free 30-day fully functional trial version of RAV AntiVirus v8
from: http://www.ravantivirus.com
Reply to: