OT - Viruses from mailing list.

[Ed Wallig]

Yeah, got something similar at about the same time - firewall caught them
before they even got to MailScanner but a bit unnerving. Haven't seen
anything since though.

 - Ed 

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Ken Goods
Sent: Tuesday, May 23, 2006 12:25 PM
To: MailScanner Mailing List (E-mail)
Subject: OT - Viruses from mailing list.

Just wondering if anyone else saw this. I received 5 of these on 5/20/06
starting at ~3:10 PST, not all the same file but the sender was the same. No
problem since MailScanner, ClamAV, and Bitdefender caught them but isn't the
list running some kind of AV?

The following e-mails were found to have: Virus Detected

Sender: mailscanner-bounces at lists.mailscanner.info
IP Address: 83.98.166.45
Recipient: kgoods at aiainsurance.com
Subject: Re: 
MessageID: k4KMTb5H031184
Quarantine: /var/spool/MailScanner/quarantine/20060520/k4KMTb5H031184
Report: ClamAV: Video_part.mim contains Worm.VB-9
Bitdefender: Found virus Win32.Nyxem.E at mm in file Video_part.mim Full
headers are:
Return-Path: <g>
Received: from bkserver.blacknight.ie (bkserver.blacknight.ie
[83.98.166.45])
by gw-mail.aiainsurance.com (8.13.1/8.13.1) with ESMTP id k4KMTb5H031184 for
<kgoods at aiainsurance.com>; Sat, 20 May 2006 15:29:37 -0700
Received: from bkserver.blacknight.ie (bkserver.blacknight.ie [127.0.0.1])
by bkserver.blacknight.ie (8.13.1/8.13.1) with ESMTP id k4KMRib7030833; Sat,
20 May 2006 23:27:58 +0100
X-Mailman-Handler: $Id: mm-handler,v 1.2 2002/04/05 19:41:09 bwarsaw Exp $
Received: from prime2 ([203.115.112.150]) by bkserver.blacknight.ie
(8.13.1/8.13.1) with SMTP id k42NkYgd011027 for
<mailscanner at lists.mailscanner.info>; Wed, 3 May 2006 00:46:35 +0100
Date: Wed, 3 May 2006 00:46:34 +0100
Message-Id: <200605022346.k42NkYgd011027 at bkserver.blacknight.ie>
From: "jayesha_shinde" <jayesha_shinde at yahoo.com>
To: <mailscanner at lists.mailscanner.info>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_3.07431757450104E-02"
X-Mailman-Approved-At: Sat, 20 May 2006 22:52:05 +0100
Subject: Re: 
X-BeenThere: mailscanner at lists.mailscanner.info
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: MailScanner discussion <mailscanner at lists.mailscanner.info>
List-Id: MailScanner discussion <mailscanner.lists.mailscanner.info>
List-Unsubscribe:
<http://lists.mailscanner.info/mailman/listinfo/mailscanner>,
<mailto:mailscanner-request at lists.mailscanner.info?subject=unsubscribe>
List-Archive: <http://lists.mailscanner.info/pipermail/mailscanner>
List-Post: <mailto:mailscanner at lists.mailscanner.info>
List-Help: <mailto:mailscanner-request at lists.mailscanner.info?subject=help>
List-Subscribe:
<http://lists.mailscanner.info/mailman/listinfo/mailscanner>,
<mailto:mailscanner-request at lists.mailscanner.info?subject=subscribe>
Sender: mailscanner-bounces at lists.mailscanner.info
Errors-To: mailscanner-bounces at lists.mailscanner.info

Cheers,
Ken

Ken Goods
Network Administrator
AIA/CropUSA Insurance, Inc.
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4493 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060523/1211fde6/smime.bin