[Dshield] headers of MS patch

Juan Manuel Parreira juan.parreira at mug.org.ar
Mon Sep 22 13:58:32 GMT 2003


New header of the "ms patch" and new subject "Last Net Critical Upgrade"
1 executble: Update.exe (Worm.Automat.AHB)
http://securityresponse.symantec.com/avcenter/venc/dyn/42036.html

J





Return-path: <clubdetango at sinectis.com.ar>
Received: from cielo.redesdelsur.com (host024010.redesdelsur.com
[200.69.24.10])
 by ********.com.ar (********.com.ar [***.***.4.26])
 (MDaemon.PRO.v6.8.5.R)
 with ESMTP id 49-md50000000002.tmp
 for <juan@********.com.ar>; Mon, 22 Sep 2003 10:09:11 -0300
Received: from ezioezdu (host024002.redesdelsur.com [200.69.24.2] (may be
forged))
 by cielo.redesdelsur.com (8.12.6/8.12.6) with SMTP id h8MDPQlc026452;
 Mon, 22 Sep 2003 10:25:26 -0300
Date: Mon, 22 Sep 2003 10:25:26 -0300
Message-Id: <200309221325.h8MDPQlc026452 at cielo.redesdelsur.com>
FROM: "Public Bulletin" <pzzchvhi-bwzed at news.ms.net>
TO: "MS Corporation Client" <client-drwrliag at news.ms.net>
Subject: [X-RBL-Warning] Last Net Critical Upgrade
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="zyecwywnaqbboyzzv"
X-RBL-Warning: mail from 200.69.24.10 refused by RSL, see
http://dsbl.org/faq-listed
X-Lookup-Warning: MAIL lookup on clubdetango at sinectis.com.ar does not match
200.69.24.10
X-MDRcpt-To: juan@********.com.ar
X-MDRemoteIP: 200.69.24.10
X-Return-Path: clubdetango at sinectis.com.ar
X-MDaemon-Deliver-To: juan@********.com.ar
Reply-To: clubdetango at sinectis.com.ar
X-Spam-Status: No, hits=3.9 required=5.0
 tests=MDAEMON_SPAM_BLOCKER,MICROSOFT_EXECUTABLE,
       MIME_HTML_NO_CHARSET
 version=2.55
X-Spam-Level: ***
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
X-Spam-Report:   ---- Start SpamAssassin results
  3.90 points, 5 required;
  *  3.0 -- Message has been marked by MDaemon's Spam Blocker
  *  0.8 -- RAW: Message text in HTML without specified charset
  *  0.1 -- RAW: Message includes Microsoft executable program
  ---- End of SpamAssassin results
X-Spam-Processed: ********.com.ar, Mon, 22 Sep 2003 10:09:14 -0300
X-HELO: from cielo.redesdelsur.com (host024010.redesdelsur.com
[200.69.24.10]) by ********.com.ar (********.com.ar [***.***.4.26])
(MDaemon.PRO.v6.8.5.R) with ESMTP id 49-md50000000002.tmp for
<juan@********.com.ar>; Mon, 22 Sep 2003 10:09:11 -0300

--zyecwywnaqbboyzzv
Content-Type: multipart/related; boundary="ytapjopfykmhml";
 type="multipart/alternative"

--ytapjopfykmhml
Content-Type: multipart/alternative; boundary="jiagxnkrhpyedma"

--jiagxnkrhpyedma
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable




More information about the list mailing list