[AG-TECH] Warning of Potential Virus Spammer

Fri Dec 14 13:54:05 CST 2001

Happy Friday!

Here's yet another virus from congxaio at cernet.edu.cn:

At 10:49 PM +0800 12/14/01, congxiao wrote:
>Received: from sea.net.edu.cn (sea.net.edu.cn [202.112.3.65])
>	by arsc.edu (2000-04-24.ARSC) with ESMTP id GAA21204
>	for <huebert at arsc.edu>; Fri, 14 Dec 2001 06:08:42 -0900 (AST)
>Received: from aol.com ([202.112.3.148])
>	by sea.net.edu.cn (8.9.3/8.9.3) with SMTP id WAA27699
>	for <huebert at arsc.edu>; Fri, 14 Dec 2001 22:49:53 +0800 (CST)
>Date: Fri, 14 Dec 2001 22:49:53 +0800 (CST)
>Message-Id: <200112141449.WAA27699 at sea.net.edu.cn>
>From: "congxiao" <_congxiao at cernet.edu.cn>
>To: huebert at arsc.edu
>Subject: Re: Re: [AG-TECH] AG Retreat 2002
>MIME-Version: 1.0
>Content-Type: multipart/related;
>	type="multipart/alternative";
>	boundary="====_ABC1234567890DEF_===="
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Unsent: 1
>X-UIDL: 38e92ce4bcf4e071e0e69ce0949fdf50
>
><x-html><!x-stuff-for-pete base="" src="" id="1" charset="iso-8859-1">
><HTML><HEAD></HEAD><BODY bgColor=#ffffff>
><iframe src=cid:EA4DMGBP9p height=0 width=0>
></iframe></BODY></HTML>
></x-html>
>Related: 
>:fluffy:Sorry_about_yesterday.MP3.pif:0005859C:2B944F0F:00000000:00000000

At 7:50 AM -0800 12/7/01, Roberts, Ian E wrote:
>Hi all, just wanted to let you know that this morning I got a message with the
>subject of Re: [AG-TECH] Demo today 1:30PST. It contained an 
>attachment that was
>blocked by our firewall virus scanner. I've reprinted the virus message below,
>along with the name of the attachment. You may want to be on your toes. The
>message I received came from "_congxiao at cernet.edu.cn" and came directly to me
>(not the list). I can only assume that this person got my e-mail from the Web
>archive of the list.
>~ian
>
>****** Message from InterScan E-Mail VirusWall NT ******
>
>
>** WARNING! Attached file Message.txt contains:
>
>
>      WORM_BADTRANS.B virus in compressed file New_Napster_Site.MP3.pif
>
>
>    Attempted to clean the file but it is not cleanable.
>
>    It has been deleted.
>
>*****************     End of message     ***************
>
>
>
>
>	----------
>	From:	congxiao
>	Sent:	Friday, December 7, 2001 12:33 AM
>	To:	Roberts, Ian E
>	Subject:	Re: [AG-TECH] Demo today 1:30PST
>
>	<<File: ATT126398.txt>>

-- 
_________________________________________________
Bob Huebert 
email: huebert at arsc.edu
HPC Visualization Systems Analyst           voice: (907) 474-5751
ARSC University of Alaska Fairbanks           FAX: (907) 474-5494