[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Mail Interception: incoming E-mail contained a virus

From: UCSD virus scanner
Subject: Mail Interception: incoming E-mail contained a virus
Date: Sat, 3 Jul 2004 04:30:16 -0700 (PDT)

  This is a message from the UCSD E-Mail Virus Protection Service

Our virus scanner indicates that an attachment or part of an E-mail
message addressed to you was infected with a virus, so THAT part of
the message has been removed from your mail.

This does NOT mean that your computer has a virus.

The rest of the original message is enclosed below.

The *INFECTED* attachment file is being held in quarantine.

If you do not want this file, you need do nothing
further and it will be destroyed automatically after 30 days.

The mail scanner program may (rarely) remove a valid attachment to a
message, part of which coincidently resembled a known virus.  If you need to
retrieve a removed message part, please read the following:

The attachment you download is likely to still be infected.
Please use EXTREME CARE in handling it.

To download the attachment, please use your browser to access:

Message part originally titled ""
has been quarantined and is retrievable at
   (scan reported VIRUS Troj/Hackarmy-A Found in file ./dfi63BTwlX039211)

If you do not have a Web browser, you may use anonymous FTP to
connect to FTP.UCSD.Edu and GET the file directly.


The /quarantine directory cannot be listed, so you must
specifically retrieve the file by the name given above.

Note that in all cases the file name of the original attachment has
been changed, and the file contents compressed with GNUZip. This
was done to help prevent it from infecting your system automatically
should you actually download it.

The original message headers and the uninfected portion of the
contents follow.  Please remember that the To: and From: addresses in
infected E-mail are often forgeries.  It is not unusual for the author
or site shown in the message to have no knowledge nor actual
responsibility for the message you received.

Following the original message (below), there is a technical data summary
which contains information our help desk personnel will need if you
call with questions about this interception.


Office of Network Operations
Academic Computing Services
University of California, San Diego
+1 858 534-1857
--- Begin Message --- Subject: Mum Undressing 3137 Date: Sat, 03 Jul 2004 11:29:52 +0000 (GMT)

--- End Message ---
If you call our helpdesk, please have the following
technical information to hand:

mailscan Version 1.2.8 on mailbox9.ucsd.edu at Sat Jul  3 04:30:16 2004

Scan results for i63BTwlX039211 Message-id: <address@hidden>
2 parts: 1 clean, 1 virus, 0 filetrap, 0 error
part   0: CLEAN ./qfi63BTwlX039211
part   1: VIRUS Troj/Hackarmy-A Found in file ./dfi63BTwlX039211
        start=0, end=-1

Original Message headers:
> Received: from pd4mo3so.prod.shaw.ca (shawidc-mo1.cg.shawcable.net 
> [])
>       by mailbox9.ucsd.edu (8.13.0.Alpha0/8.13.0.Alpha0) with ESMTP id 
> i63BTwlX039211
>       for <address@hidden>; Sat, 3 Jul 2004 04:30:12 -0700 (PDT)
> Path: 53ab2750!not-for-mail
> Received: from pd2mr5so.prod.shaw.ca (pd2mr5so-qfe3.prod.shaw.ca [])
>  by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.18 (built Jul 28 2003))
>  with ESMTP id <address@hidden> for address@hidden;
>  Sat, 03 Jul 2004 05:29:59 -0600 (MDT)
> Received: from pd2pm1so ([])
>  by pd2mr5so.prod.shaw.ca (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar
>  15 2004)) with ESMTP id <address@hidden> for
>  address@hidden; Sat, 03 Jul 2004 05:29:58 -0600 (MDT)
> Received: from shaw.ca ([])
>  by l-daemon (iPlanet Messaging Server 5.0 Patch 2 (built Dec 14 2000))
>  with ESMTP id <address@hidden> for address@hidden;
>  Sat, 03 Jul 2004 05:29:52 -0600 (MDT)
> Received: by shaw.ca (8.12.8+Sun/8.12.8/Submit) id i63BTqkN027370; Sat,
>  03 Jul 2004 05:29:52 -0600 (MDT)
> X-Trace: pd7tw2no 1088854192 (Sat, 03 Jul 2004 05:29:52 MDT)
> Date: Sat, 03 Jul 2004 11:29:52 +0000 (GMT)
> From: address@hidden
> Subject: Mum Undressing  3137
> To: address@hidden
> Message-id: <address@hidden>
> Organization: Shaw Residential Internet
> X-Complaints-to: address@hidden
> NNTP-posting-date: Sat, 03 Jul 2004 05:29:52 MDT
> X-Trace-PostClient-IP:
> Newsgroups: 
> gnu.bash.bug,gnu.cfengine,gnu.cfengine.bug,gnu.cfengine.help,gnu.chess,gnu.chess.bug,gnu.config,gnu.cvs.help
> Lines: 257
> NNTP-posting-host:
> X-Spamscanner: mailbox9.ucsd.edu  (v1.4 May 20 2004 13:55:33, 5.9/5.0 2.63)
> X-Spam-Flag: Spam YES
> X-Spam-Level: Level *****

reply via email to

[Prev in Thread] Current Thread [Next in Thread]