Re: [APML] Virus with APML subject recieved...

["Jeff Crilly" <jlcphoto@myrealbox.com>]

I just wanted to echo Matthias observation... its not "coming from the list".

However, it does seem somewhat clear that someone on the list (or was
on the list as recently as 6/23/03) is infected..

Also, since virus mail is indeed being sent, then it appears that
the person is using his machine, etc.

Again, I would direct folks to check out something like...
http://www.symantec.com/cgi-bin/securitycheck.cgi
to see if they are ok. 

(Ugh.. now I really want to switch to osx)

----- Original Message ----- 
From: "Matthias Felsch" <box2@mfelsch.de>
To: "Discussion of Film Astrophotography" <astro-photo@seds.org>
Sent: Wednesday, July 02, 2003 6:27 AM
Subject: Re: [APML] Virus with APML subject recieved...


> The headers, that Geoff Powers provided, shows that the virus mails
> do not come via the APML list.
> The server's name "seds.lpl.arizona.edu" , that seems to host
> the list, does not appear in the headers.
> The virus can fake the subject and the sender, but not the
> complete header, I think.. the header's written step by step by the
> servers that transport the mail. One of them should be a machine at
> seds.org, if the virus mails would come through the list. But the latter
> does not seem to be the case.
> 
> By the way, I find it VERY irritating, that since february 2003,
> many of the messages I receive from APML, seem to contain an 
> attachment (though they don't have any)... 
> In times of virus traffic this is not really comfortable...
> 
> Matthias Felsch
> 
> 
> ----- Original Message ----- 
> From: "Robert Reeves" <reeves10@swbell.net>
> To: "Discussion of Film Astrophotography" <astro-photo@seds.org>
> Sent: Wednesday, July 02, 2003 4:53 AM
> Subject: Re: [APML] Virus with APML subject recieved...
> 
> 
> > 
> > > Just received another one. Sender: John Beecher
> > > Subject: Don't buy anything from Don Larpe and his crooks
> > > Norton caught it and the file is map.gif.zlq  Virus name W32Bugbear.b@mm
> > >
> > > Don SPencer
> > 
> > Same thing just bounced off my computer.  This makes the third Bugbear virus
> > that has hit me today.  As far as I can tell, but I am not 100% positive,
> > they seem to be coming through APML.  Either that or something that is
> > mimiking mail from APML.  Southwestern Bell seems quite content to push them
> > all through to me, but Norton's has been nailing them.
> > 
> > Robert Reeves                      reeves10@swbell.net
> > 520 Rittiman Rd.                   www.robertreeves.com
> > San Antonio, Texas 78209    210-828-9036
> > USA                                     29.484  98.440  200 meters
> > 
> > 
> > _______________________________________________
> > Astro-Photo mailing list
> > Astro-Photo@seds.org
> > http://seds.org/mailman/listinfo/astro-photo
> >
> _______________________________________________
> Astro-Photo mailing list
> Astro-Photo@seds.org
> http://seds.org/mailman/listinfo/astro-photo
> 
_______________________________________________
Astro-Photo mailing list
Astro-Photo@seds.org
http://seds.org/mailman/listinfo/astro-photo