[Dshield] Fw: Warning - we have received a virus-infected mail from you!

Bjorn Stromberg bjorn at thechemistrylab.com
Fri Apr 23 17:02:07 GMT 2004


Didn't we already have a discussion about why notices for infected e-mail
are bad?

I don't need advertising for anti-virus solutions and I definitely wouldn't
choose one that sends out e-mails for false positive virus results. If you
are responsible for these mail servers, please set your anti-virus software
to NEVER send out notification e-mails.

Thanks,

Bjorn Stromberg
::this is not a sig::

========================================
Received: from mail.bhfc.net ([209.159.192.8]) by
bahamut.thechemistrylab.com with Microsoft SMTPSVC(5.0.2195.6713);
  Fri, 23 Apr 2004 10:32:08 -0600
Received: from exchange_pop3_connector.com
(w130.z067104127.sjc-ca.dsl.cnc.net [67.104.127.130])
 by mail.bhfc.net (8.12.6-20030924/8.12.6) with SMTP id i3NGW4Bp027480
 for <bjorn at thechemistrylab.com>; Fri, 23 Apr 2004 10:32:06 -0600
Message-Id: <200404231632.i3NGW4Bp027480 at mail.bhfc.net>
To: "Bjorn Stromberg" <bjorn at thechemistrylab.com>
From: POPcon Virus Detection <virus.spam at cornerstone-sf.local>
Date: Sat, 23 Apr 2004 09:32:03
Subject: Warning - we have received a virus-infected mail from you!
Return-Path: <>
X-OriginalArrivalTime: 23 Apr 2004 16:32:08.0246 (UTC)
FILETIME=[85393D60:01C42950]

Our email system has detected a virus in a mail with your sender address in
it.
Please check your system immediately.

Please check out RAV Antivirus if you need a fast and auto-updating
antivirus solution.
Information about RAV Antivirus can be found at
http://www.christensen-software.com/av.asp

This particular virus was detected by "POPcon PRO - Exchange POP3
Connector". More information about POPcon PRO can be found at
http://www.christensen-software.com/popconpro.htm

This is the information about the virus as it came from our virus scanner:


From:      "Bjorn Stromberg" <bjorn at thechemistrylab.com>
To:        "General DShield Discussion List" <list at lists.dshield.org>
Subject:   Re: [Dshield] FW: Osama Bin Laden Captured
Virusname: Exploit:HTML/MhtRedir.gen*

====================================

Received:  from mail.bhfc.net ([209.159.192.8]) by
bahamut.thechemistrylab.com with Microsoft SMTPSVC(5.0.2195.6713); Fri, 23
Apr 2004 10:28:58 -0600
Received:  from ndsmime01.naspers.com (ndsmime01.naspers.com [152.111.1.2])
by mail.bhfc.net (8.12.6-20030924/8.12.6) with ESMTP id i3NGStBp021093 for
<bjorn at thechemistrylab.com>; Fri, 23 Apr 2004 10:28:57 -0600
MIME-Version: 1.0
Content-Type: text/plain;
 charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Received:  from ndsxch02.naspers.com (unverified [152.111.1.12]) by
ndsmime01.naspers.com (Content Technologies SMTPRS 4.3.12) with ESMTP id
<T692507849b986f01020c0 at ndsmime01.naspers.com>; Fri, 23 Apr 2004 18:26:55
+0200
Received:  by ndsxch02.naspers.com with Internet Mail Service (5.5.2657.72)
id     <205SDBY5>; Fri, 23 Apr 2004 18:26:52 +0200
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
Return-Path: <NAINASSITE01NDSXCH03 at naspers.com>
X-Mailer: Internet Mail Service (5.5.2657.72)
X-OriginalArrivalTime: 23 Apr 2004 16:28:58.0356 (UTC)
FILETIME=[140A5340:01C42950]
content-class: urn:content-classes:message
Subject: ALERT -  GroupShield ticket number OB33_1082737574_NDSXCH03_1 was
generated
Date: Fri, 23 Apr 2004 10:26:59 -0600
Message-ID: <16E8656C063C6D46BA77995C917BB0CA02710FDA at ndsxch03.naspers.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: ALERT -  GroupShield ticket number OB33_1082737574_NDSXCH03_1
was generated
Thread-Index: AcQpT81UIVtx3SO1RBWCS1IGn9zAuw==
From: "GroupShield for Exchange (NDSXCH03)"
<NAINASSITE01NDSXCH03 at NASPERS.COM>
To: "Bjorn P. Stromberg" <bjorn at thechemistrylab.com>,
 "General DShield     Discussion List" <list at lists.dshield.org>

Action Taken:
The message was quarantined and replaced with a text informing the =
recipient of the action taken.

To:
General DShield Discussion List <list at lists.dshield.org>

From:
Bjorn Stromberg <bjorn at thechemistrylab.com>

Sent:
-1307339008,29632847

Subject:
Re: [Dshield] FW: Osama Bin Laden Captured

Attachment Details:-

Attachment Name: N/A
File: Infected.msg
Infected? Yes
Repaired? No
Blocked? No
Deleted? No
Virus Name: Exploit-MhtRedir.gen



=09

**********************************************************************
This email and its contents are subject to an email legal notice that =
can be viewed at: http://www.naspers.com/email/disclaimer.html. Should =
you be unable to access the link provided, please email us for a copy at =
Helpdesk at Media24.com.

Hierdie e-pos en sy inhoud is onderhewig aan 'n regskennisgewing oor =
elektroniese pos wat gelees kan word by =
http://www.naspers.com/epos/vrywaring.html. 'n Afskrif kan aangevra word =
by helpdesk at media24.com.
**********************************************************************




More information about the list mailing list