Tis the season to be cracking ...

Mailman List Mirror (Read Only)
1

Not only do we have SirCam and CodeRed, but just tday I started getting a
bunch of [what looks like spam] email virii. They're all hitting my filters,
but I thought y'all might have noticed similar things. This is two weeks
before many Universitys open for business. That's right about the time I
drop my EDU filters in place [having kids keeps you aware of these things].
I haven't seen this reported yet. It looks like we have a whole flock of
wannabe virus writers out there this year. I'd block EDU permanently, but
too many ICANN folks are on EDU addresses.

2

Not only do we have SirCam and CodeRed, but just tday I started getting a
bunch of [what looks like spam] email virii. They're all hitting my filters,
but I thought y'all might have noticed similar things. This is two weeks

This just crept into my mailbox...

Received: from dave-pc ([IP Address in Germany])

    [ Part 1, Application/OCTET-STREAM (Name: "CNJOIMCN.EXE") 28KB. ]
    [ Cannot display this part. Press "V" then "S" to save in a file. ]

Except for date/time and received from, no other headers.

-Gordon

3

Perhaps this is actually coming from one source, then:

Return-Path: <>
Delivered-To: james@pil.net
Received: (qmail 21095 invoked from network); 10 Aug 2001 06:03:14 -0000
Received: from host-979.i-dial.de (HELO dave-pc) (193.149.52.172)
  by richard2.pil.net with SMTP; 10 Aug 2001 06:03:14 -0000
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="--VE16Z8L6JO5"

    [ Part 1, Application/OCTET-STREAM (Name: "CNJOIMCN.EXE") 28KB. ]
    [ Cannot display this part. Press "V" then "S" to save in a file. ]

James Smallacombe PlantageNet, Inc. CEO and Janitor
up@3.am http://3.am

4

Yep. Same dude.

-G