[Mapserver-users] [Fwd: [virusalert@mail.ci.collierville.tn.us: VIRUS (Worm/Bagle.F)
FROM <mapserver-users-admin@lists.gis.umn.edu>]]
Jim Butcher
jbutcher at ci.collierville.tn.us
Mon Mar 1 12:55:43 EST 2004
--=-SFt1hQMV6OmNQtq8S1ZA
Content-Type: multipart/mixed; boundary="=-3g1RZTpV4/nCjDZBOK+l"
--=-3g1RZTpV4/nCjDZBOK+l
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
To the list administrator,
I don't know what the list administrator can do about this problem. An
individual subscriber is unwittingly sending the worm Bagle.F through
the list. The traceback information supplied by my SysAdmin is
attached.
--=20
James H. Butcher, G.G.(GIA)
GIS Manager
Town of Collierville
Division of Planning
500 Poplar View Pkwy
Collierville, TN 38017
P: 901-457-2360
F: 901-457-2354
email: jbutcher at ci.collierville.tn.us
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GAT d+ s---:+ a+ C+++ UL++++ P+ L++ E--- W+++ N+ o+ K- w---
O M V PS-- PE++ Y+ PGP++ t++ 5++++ X++ R++ tv++ b++++ DI+++ D++
G e+++ h r y+
------END GEEK CODE BLOCK------
--=-3g1RZTpV4/nCjDZBOK+l
Content-Disposition: inline
Content-Description: Forwarded message -
[virusalert at mail.ci.collierville.tn.us: VIRUS (Worm/Bagle.F) FROM
<mapserver-users-admin at lists.gis.umn.edu>]
Content-Type: message/rfc822
Return-Path: <donski at ci.collierville.tn.us>
X-Original-To: jbutcher at ci.collierville.tn.us
Delivered-To: jbutcher at ci.collierville.tn.us
Received: from localhost (localhost.localdomain [127.0.0.1]) by
mail.ci.collierville.tn.us (Postfix) with ESMTP id B809328304 for
<jbutcher at ci.collierville.tn.us>; Mon, 1 Mar 2004 10:40:37 -0600 (CST)
Received: from mail.ci.collierville.tn.us ([127.0.0.1]) by localhost (mail
[127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26363-09 for
<jbutcher at ci.collierville.tn.us>; Mon, 1 Mar 2004 10:40:35 -0600 (CST)
Received: from tuxbert.ci.collierville.tn.us (kevlar.ci.collierville.tn.us
[168.215.127.126]) by mail.ci.collierville.tn.us (Postfix) with ESMTP id
10BA728059 for <jbutcher at ci.collierville.tn.us>; Mon, 1 Mar 2004 10:40:35
-0600 (CST)
Received: by tuxbert.ci.collierville.tn.us (Postfix, from userid 1000) id
6A198448023; Mon, 1 Mar 2004 10:53:52 -0600 (CST)
Date: Mon, 1 Mar 2004 10:53:52 -0600
From: Don Petrowski <dpetrowski at ci.collierville.tn.us>
To: jbutcher at ci.collierville.tn.us
Subject: [virusalert at mail.ci.collierville.tn.us: VIRUS (Worm/Bagle.F) FROM
<mapserver-users-admin at lists.gis.umn.edu>]
Message-ID: <20040301165352.GB14666 at ci.collierville.tn.us>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="hHWLQfXTYDoKhP50"
Content-Disposition: inline
User-Agent: Mutt/1.5.6i
X-Virus-Scanned: by amavisd-new at mail
Status:
--hHWLQfXTYDoKhP50
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
----- Forwarded message from virusalert at mail.ci.collierville.tn.us -----
X-Original-To: donski at localhost
Delivered-To: donski at localhost.ci.collierville.tn.us
X-Original-To: virusalert at mail
Delivered-To: compteam at ci.collierville.tn.us
Date: Mon, 1 Mar 2004 10:22:30 -0600 (CST)
=46rom: virusalert at mail.ci.collierville.tn.us
Subject: VIRUS (Worm/Bagle.F) FROM <mapserver-users-admin at lists.gis.umn.edu>
To: virusalert at mail.ci.collierville.tn.us
A virus (Worm/Bagle.F) was found.
Scanner detecting a virus: H+BEDV AntiVir or CentralCommand Vexira Antivirus
The mail originated from: <mapserver-users-admin at lists.gis.umn.edu>
According to the 'Received:' trace, the message originated at:
khendricksb ([198.3.82.101]) =20
The message WAS NOT delivered to:
<jbutcher at ci.collierville.tn.us>:
550 5.7.1 Message content rejected, id=3D25394-05 - VIRUS: Worm/Bagle.F
Virus scanner output:
Vexira Antivirus / Linux Version 2.2.0-8
Copyright (C) 2002-2004 Central Command, Inc. and/or its suppliers.
Portions copyright (C) 1996-2004 H+BEDV Datentechnik GmbH.
All rights reserved.
=20
Loading /usr/lib/Vexira/vexira.vdf ...
=20
VDF version: 6.24.0.29 created 01 Mar 2004
=20
Vexira Antivirus license: 2003000000 for Town of Collierville
=20
checking drive/path (list): /var/run/amavis/tmp/amavis-20040301T101754-2=
5394/parts
ALERT: [Worm/Bagle.F worm] /var/run/amavis/tmp/amavis-20040301T101754-25=
394/parts/part-00002 <<< Contains signature of the worm Worm/Bagle.F
=20
=20
----- scan results -----
directories: 1
files: 2
alerts: 1
repaired: 0
deleted: 0
renamed: 0
scan time: 00:00:01
------------------------
Thank you for using Vexira Antivirus!
The message has been quarantined as:
/var/virusmails
------------------------- BEGIN HEADERS -----------------------------
Return-Path: <mapserver-users-admin at lists.gis.umn.edu>
Received: from lists.gis.umn.edu (lists.gis.umn.edu [128.101.73.109])
by mail.ci.collierville.tn.us (Postfix) with ESMTP id 4AD6A28059
for <jbutcher at ci.collierville.tn.us>; Mon, 1 Mar 2004 10:22:21 -0600 (CST)
Received: from lists.gis.umn.edu (localhost [127.0.0.1])
by lists.gis.umn.edu (8.12.10/8.12.10) with ESMTP id i21GMkAP017699;
Mon, 1 Mar 2004 10:22:46 -0600 (CST)
Received: from khendricksb ([198.3.82.101])
by lists.gis.umn.edu (8.12.10/8.12.10) with SMTP id i21GGqAQ017594
for <mapserver-users at lists.gis.umn.edu>; Mon, 1 Mar 2004 10:16:57 -0600 (C=
ST)
To: mapserver-users at lists.gis.umn.edu
=46rom: kames at keyspanenergy.com
Message-ID: <uaxtcpwyetbmeoymkmp at keyspanenergy.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=3D"--------lldoemeixdgjjmjycago"
Subject: [Mapserver-users] Tammy
Sender: mapserver-users-admin at lists.gis.umn.edu
Errors-To: mapserver-users-admin at lists.gis.umn.edu
X-BeenThere: mapserver-users at lists.gis.umn.edu
X-Mailman-Version: 2.0.13
Precedence: bulk
List-Unsubscribe: <http://lists.gis.umn.edu/mailman/listinfo/mapserver-user=
s>,
<mailto:mapserver-users-request at lists.gis.umn.edu?subject=3Dunsubscribe>
List-Id: Mapserver Users Mailing List (Appropriate for general users) <maps=
erver-users.lists.gis.umn.edu>
List-Post: <mailto:mapserver-users at lists.gis.umn.edu>
List-Help: <mailto:mapserver-users-request at lists.gis.umn.edu?subject=3Dhelp>
List-Subscribe: <http://lists.gis.umn.edu/mailman/listinfo/mapserver-users>,
<mailto:mapserver-users-request at lists.gis.umn.edu?subject=3Dsubscribe>
List-Archive: <http://lists.gis.umn.edu/pipermail/mapserver-users/>
Date: Mon, 01 Mar 2004 10:33:19 -0600
-------------------------- END HEADERS ------------------------------
----- End forwarded message -----
--=20
Don Petrowski
Town of Collierville
Network Administrator
500 Poplar View Pkwy
Collierville, TN 38017
Phone: (901) 457-2260
Fax: (901) 457-2246
--BEGIN GEEK CODE BLOCK --
Version: 3.12
GIT/IT d- s:++>+ a>? C+$ LS++$ P+>+++ L+++$>++++$ E? W+=20
N++ o? K? w! O? M- V? PS PE Y+(++) PGP++ t+>++ 5+ at +++=20
X+ at +++ R* tv+ b>++ DI++++ D+ G e++>++++ h r+++ y++++=20
-- END GEEK CODE BLOCK --
--hHWLQfXTYDoKhP50
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFAQ2qgcCMgncA57gARAo91AKCEIaFmAUt+m69cK62COM846rybpwCdF2tC
a2mdF6iSkT/CnXImpcABuvw=
=UT+U
-----END PGP SIGNATURE-----
--hHWLQfXTYDoKhP50--
--=-3g1RZTpV4/nCjDZBOK+l--
--=-SFt1hQMV6OmNQtq8S1ZA
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQBAQ3kfmYYXQhPwN5ARAn16AJ9X3vsRp4tYzzeMtnNPuB0/NdKywACfeWLE
GUA2wcSdozndOpeByiqlt/M=
=+VMG
-----END PGP SIGNATURE-----
--=-SFt1hQMV6OmNQtq8S1ZA--
More information about the mapserver-users
mailing list