[squid-users] Warning: "walter@quickweb.com.ph" answers with Virus/Trojan...

From: Stephan Wasserroth <wasserroth@dont-contact.us>
Date: Mon, 9 Jul 2001 10:38:00 +0200 (MET DST)

This is just to warn other members of the list about a virus infected
email disguised as "answer".

I've got one direct answer to my question "Transparent proxy does not work --
squid does not deliver data to client...". The mail contained an attachment
"s3msong.MP3.pif", which actually is a trojan named "W32/BadTrans@MM".

The relevant message headers:
Received: from goku.quickweb.com.ph (qmailr@goku.quickweb.com.ph
[208.235.228.71])
Received: from unknown (HELO demo) (208.235.228.19)
  by goku.quickweb.com.ph with SMTP; 7 Jul 2001 07:04:37 -0000
Message-ID: <001b01c10566$4173dd80$13e4ebd0@manilaonline.net>
From: "walter" <walter@quickweb.com.ph>
X-Mailer: Microsoft Outlook Express 5.00.2615.200
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
Content-Length: 19012

Stephan 

--
  Stephan Wasserroth               (Systems- and Network-Manager)
Head of Technical Department
GMD-Fokus | Kaiserin-Augusta-Allee 31 | D-10589 Berlin
e-mail: wasserroth@fokus.gmd.de  FAX: +49 30 3463-8253
PGP-Key fingerprint: B3 83 35 C1 84 32 AA C5  11 A9 30 AB 59 19 60 47
Received on Mon Jul 09 2001 - 02:38:05 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:01:03 MST