The same thing has happened to my Question, A Plea for log files.
At 10:38 09/07/2001 +0200, Stephan Wasserroth wrote:
>This is just to warn other members of the list about a virus infected
>email disguised as "answer".
>
>I've got one direct answer to my question "Transparent proxy does not work --
>squid does not deliver data to client...". The mail contained an attachment
>"s3msong.MP3.pif", which actually is a trojan named "W32/BadTrans@MM".
>
>The relevant message headers:
>Received: from goku.quickweb.com.ph (qmailr@goku.quickweb.com.ph
>[208.235.228.71])
>Received: from unknown (HELO demo) (208.235.228.19)
> by goku.quickweb.com.ph with SMTP; 7 Jul 2001 07:04:37 -0000
>Message-ID: <001b01c10566$4173dd80$13e4ebd0@manilaonline.net>
>From: "walter" <walter@quickweb.com.ph>
>X-Mailer: Microsoft Outlook Express 5.00.2615.200
>X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
>Content-Length: 19012
>
>Stephan
>--
>
> Stephan Wasserroth (Systems- and Network-Manager)
>Head of Technical Department
>GMD-Fokus | Kaiserin-Augusta-Allee 31 | D-10589 Berlin
>e-mail: wasserroth@fokus.gmd.de FAX: +49 30 3463-8253
>PGP-Key fingerprint: B3 83 35 C1 84 32 AA C5 11 A9 30 AB 59 19 60 47
>
>
Received on Mon Jul 09 2001 - 03:23:07 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:01:03 MST