Caution: Trojans sent in the name of Steve

Hi all,

I got a mail via the list with a .zip file attached. The sender was
sol0@lehigh.edu
which is Steve's address (I'm sure that this is spoofed!).
The zip file contains an HTML and a .exe file. McAfee reports
a trojan in the HTML so be careful.

Regards,
Gerhard

-++**==--++**==--++**==--++**==--++**==--++**==--++**==
This message was posted through the Stanford campus mailing list
server.  If you wish to unsubscribe from this mailing list, send the
message body of "unsubscribe ptk" to majordomo@lists.stanford.edu

On Aug 10, 2004, at 1:53 AM, gerhard.petrowitsch@philips.com wrote:

>
>
>
>
> Hi all,
>
> I got a mail via the list with a .zip file attached. The sender was
> sol0@lehigh.edu
> which is Steve's address (I'm sure that this is spoofed!).

I afraid so - thank you Windows.  What happens is that my address gets
picked from the address book of many scores of (mostly Windows, I
assume) machines, and y'all get a fresh copy of whatever virus happens
to be going around.  I, in turn, get all the bounce mails and messages
noting that "XYZ virus has been removed from my mail".  In the heat of
a new virus sol0@lehigh.edu gets thousands of spam mails per day, none
of which actually harm me since I read them only on Unix and Mac OS X,
but it's a royal PITA.

For this is surely apologize, although there's not a thing I can do. ;(



> The zip file contains an HTML and a .exe file. McAfee reports
> a trojan in the HTML so be careful.
>
> Regards,
> Gerhard
>
> -++**==--++**==--++**==--++**==--++**==--++**==--++**==
> This message was posted through the Stanford campus mailing list
> server.  If you wish to unsubscribe from this mailing list, send the
> message body of "unsubscribe ptk" to majordomo@lists.stanford.edu

-++**==--++**==--++**==--++**==--++**==--++**==--++**==
This message was posted through the Stanford campus mailing list
server.  If you wish to unsubscribe from this mailing list, send the
message body of "unsubscribe ptk" to majordomo@lists.stanford.edu

Lidie Steve <sol0@lehigh.edu> writes:
x>> I got a mail via the list with a .zip file attached. The sender was 
>
>I afraid so - thank you Windows.  What happens is that my address gets
>picked from the address book of many scores of (mostly Windows, I
>assume) machines, and y'all get a fresh copy of whatever virus happens
>to be going around.  I, in turn, get all the bounce mails and messages
>noting that "XYZ virus has been removed from my mail".  In the heat of
>a new virus sol0@lehigh.edu gets thousands of spam mails per day, none
>of which actually harm me since I read them only on Unix and Mac OS X,
>but it's a royal PITA.
>
>For this is surely apologize, although there's not a thing I can do. ;(

Same for me - only possibly more so. At new virus peak ing-simmons.net
gets 10,000s of e-mails, but fortunately DynDNS.org runs SPAMAssassin
for me (I use their mailhop service) and so I can avoid downloading
most of them.



-++**==--++**==--++**==--++**==--++**==--++**==--++**==
This message was posted through the Stanford campus mailing list
server.  If you wish to unsubscribe from this mailing list, send the
message body of "unsubscribe ptk" to majordomo@lists.stanford.edu

On Aug 16, 2004, at 5:31 AM, Nick Ing-Simmons wrote:
>
> Same for me - only possibly more so. At new virus peak ing-simmons.net
> gets 10,000s of e-mails, but fortunately DynDNS.org runs SPAMAssassin
> for me (I use their mailhop service) and so I can avoid downloading
> most of them.
>

We too use SPAMAssassin, so I do not actually see most of the junk
mail. I the beginning I felt obligated to scan my junk mailbox for
non-SPAM stuff that might have been filtered out in error, but I no
longer have that feeling.


-++**==--++**==--++**==--++**==--++**==--++**==--++**==
This message was posted through the Stanford campus mailing list
server.  If you wish to unsubscribe from this mailing list, send the
message body of "unsubscribe ptk" to majordomo@lists.stanford.edu