Someone on list with latest virus?

Timothy Luoma freebsd at tntluoma.com
Sun Sep 21 05:26:06 PDT 2003


This email address (freebsd at tntluoma.com) started to receive the virus not 
long after I used it to post to this freebsd-(questions|mobile).  Since 
the address was just created and has only been used for these two lists, 
it seems a good guess that someone here is infected.

I don't know if the headers would be useful in tracking down who it is 
(may be more than one even) but here they are, FWIW.

(I assume all the email addresses are forged by the virus)

#1
Return-Path: 	<verdag1 at comcast.net>	

Received: 	from unknown (HELO sccrmhc12.comcast.net) (204.127.202.56) by 
square.phpwebhosting.com with SMTP; 21 Sep 2003 06:30:07 -0000	

Received: 	from sccrmhc12.comcast.net (localhost[127.0.0.1]) by 
comcast.net (sccrmhc12) with ESMTP id <2003092106300701200q9lqce>; Sun, 21 
Sep 2003 06:30:07 +0000	

Received: 	from znounx (12-229-238-35.client.attbi.com[12.229.238.35]) by 
comcast.net (sccrmhc12) with SMTP id <2003092106242001200r8ftoe>; Sun, 21 
Sep 2003 06:24:24 +0000	

#2
Return-Path: 	<kodiak08 at telus.net>	

Received: 	(qmail 5296 invoked from network); 21 Sep 2003 09:01:56 -0000	

Received: 	from unknown (HELO priv-edtnes56.telusplanet.net) 
(199.185.220.240) by square.phpwebhosting.com with SMTP; 21 Sep 2003 
09:01:56 -0000	

Received: 	from fglokmnk ([154.5.65.172]) by priv-edtnes56.telusplanet.net 
(InterMail vM.5.01.05.17 201-253-122-126-117-20021021) with SMTP id 
<20030921090151.BYOD6747.priv-edtnes56.telusplanet.net at fglokmnk>; Sun, 21 
Sep 2003 03:01:51 -0600	

#3
Return-Path: 	<gshyland at bis.midco.net>	

Received: 	from unknown (HELO mailhub2.midco.net) (24.220.0.34) by 
square.phpwebhosting.com with SMTP; 21 Sep 2003 09:57:31 -0000	

Received: 	from host-68-172-220-24.midco.net (HELO oxyara) 
([24.220.172.68]) (envelope-sender <gshyland at bis.midco.net>) by 
lvs-pop.midco.net (qmail-ldap-1.03) with SMTP for <grog at freebsd.org>; 21 
Sep 2003 09:57:19 -0000	

#4
Return-Path: 	<bishop05 at comcast.net>	

Received: 	from unknown (HELO rwcrmhc13.comcast.net) (204.127.198.39) by 
square.phpwebhosting.com with SMTP; 21 Sep 2003 12:16:36 -0000	



More information about the freebsd-questions mailing list