No Yahoo group should allow attachments! Unfortunately this one *still* does and
has passed an infected message to the list members on direct email. :-/ I hope
everybody was protected. Offending message headers are below, including my
server's virus scan... (personal info munged)
John
========== infected message headers ===============
> From sentto-1156922-668-1088642453-***@... Wed Jun 30
17:41:02 2004
> Return-Path: <sentto-1156922-668-1088642453-***@...>
> Received: from n14.grp.scd.yahoo.com ([66.218.66.69]) by ***.org for <***>;
Wed, 30 Jun 2004 17:40:57 -0700
> X-eGroups-Return: sentto-1156922-668-1088642453-***@...
> Received: from [66.218.67.192] by n14.grp.scd.yahoo.com with NNFMP; 01 Jul
2004 00:40:53 -0000
> X-Sender: gsutter@...
> X-Apparently-To: junkfilter-users@...
> Received: (qmail 50057 invoked from network); 1 Jul 2004 00:40:52 -0000
> Received: from unknown (66.218.66.217) by m10.grp.scd.yahoo.com with QMQP; 1
Jul 2004 00:40:52 -0000
> Received: from unknown (HELO groups.yahoo.com) (219.26.181.19) by
mta2.grp.scd.yahoo.com with SMTP; 1 Jul 2004 00:40:51 -0000
> To: junkfilter-users@yahoogroups.com
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-eGroups-Remote-IP: 219.26.181.19
> From: gsutter@...
> X-Yahoo-Profile: zer0es
> MIME-Version: 1.0
> Mailing-List: list junkfilter-users@yahoogroups.com; contact
junkfilter-users-owner@yahoogroups.com
> Delivered-To: mailing list junkfilter-users@yahoogroups.com
> Precedence: bulk
> List-Unsubscribe: <mailto:junkfilter-users-unsubscribe@yahoogroups.com>
> Date: Thu, 1 Jul 2004 09:41:31 +0900
> Subject: [jf] Mail Delivery (failure junkfilter-users@...)
> Reply-To: junkfilter-users@yahoogroups.com
> Content-Type: multipart/related;
boundary="----=_NextPart_000_001B_01C0CA80.6B015D10"
> X-VirusScan: F-Secure Anti-Virus for Linux version 4.51
> X-FSAV-Viruses-Found: /home/***/tmp/filelnVIxg:Infected:isasecurityriskora
> /home/***/tmp/filelnVIxg:Suspected:Exploit.IFrame.FileDownload[AVP]
>
[[Fromgsutter@...][Subject:[jf]MailDelivery(failurejunkfilter-users@groups.\
yahoo.com)]]noname:
>
[Fromgsutter@...][Subject:[jf]MailDelivery(failurejunkfilter-users@...\
ahoo.com)]:Suspected:Exploit.IFrame.FileDownload
>
[Fromgsutter@...][Subject:[jf]MailDelivery(failurejunkfilter-users@...\
ahoo.com)]message.scr:Infected:is
>
[Fromgsutter@...][Subject:[jf]MailDelivery(failurejunkfilter-users@...\
ahoo.com)]message.scr:Infected:I-Worm.NetSky.q
>
[Fromgsutter@...][Subject:[jf]MailDelivery(failurejunkfilter-users@...\
ahoo.com)]message.scr:Infected:W32/NetSky.P@mm
> Status: RO