Re: [squid-users] Virus Alert

From: Henrik Nordstrom <[email protected]>
Date: Mon, 19 Jan 2004 17:34:24 +0100 (CET)

On Mon, 19 Jan 2004, kareem Mahgoub wrote:

> Hi list,
> The subscriber wessels@squid-cache.org is infected with the following virus
> ( as detected by Norton)
> Norton AntiVirus removed the attachment: afebvcujwa.exe.
> The attachment was infected with the W32.Beagle.A@mm virus.
> Take care all.

Thanks for the alert.

This was a "clever" virus which managed to slip the mail verifications
done by the squid-cache.org mailinglist server.

Have now added a simple rule which should block any messages attempting to
do similar things, so hopefully this was the last copy we have seen of
this one on the mailing list.

Duane is quite innocent in this. The virus just masqueraded itself using
his address. For the interested the actual sources was:

Received: from unknown (HELO ew) (192.248.80.204)
  by squid-cache.org with SMTP; 19 Jan 2004 09:50:18 -0000
(Sri Lanka Telecom)

Received: from unknown (HELO MXD340031W) (209.183.147.90)
  by squid-cache.org with SMTP; 19 Jan 2004 13:33:23 -0000
(Golden Triangle On-Line)

Regards
Henrik
Received on Mon Jan 19 2004 - 09:34:28 MST

This archive was generated by hypermail pre-2.1.9 : Sun Feb 01 2004 - 12:00:07 MST