[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

WARNING: YOU MAY HAVE A VIRUS

On 06/04/2003 at 13:40:56 the virus scanning software on FIRST Internet's mail servers has reported that ports@openbsd.org sent an E-mail to fullhous@1st.net, containing the : W32/Sobig.C@mm virus in the 45443.pif attachment.  The subject of the E-mail was "Re: Screensaver".  The E-mail containing the virus has been quarantined to prevent further damage.

The message headers associated with the message in question are:

Received: from mailrelay.1st.net [209.240.0.175] by 1st.net with ESMTP
  (SMTPD32-7.14) id AF26ED022E; Wed, 04 Jun 2003 13:40:54 -0400
Received: from MNI (host217-39-10-121.in-addr.btopenworld.com [217.39.10.121])
	by mailrelay.1st.net (8.12.8/8.12.5) with ESMTP id h54HdWmA030982
	for <fullhous@1st.net>; Wed, 4 Jun 2003 13:39:33 -0400
Message-Id: <200306041739.h54HdWmA030982@mailrelay.1st.net>
From: <ports@openbsd.org>
To: <fullhous@1st.net>
Subject: Re: Screensaver
Date: Wed, 4 Jun 2003 18:39:42 +0100
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="CSmtpMsgPart123X456_000_015BE905"

MAILFROM = ports@openbsd.org

NOTE:  If the MAILFROM field contains a different email address than the FROM: address in the message headers above, the message headers contain a forged FROM: address and the MAILFROM is then a more trustworthy (but not guaranteed) indication of the real sender's email address.  See below for an explanation of how many viruses forge the FROM: address.

NOTE:  These days there are new virii out that will forge the 'FROM:' address that sends the message.  As such, you _MAY_ be getting this message in error, and if so we do apologize.  However, it is definitely in your best interest to check your system for virii as there is a very high probability that your system is indeed infected with a virus.

You may say "I didn't send any emails out today" or "at such and such time."  However, viruses these days are smart enough to be able to send out virus-infected attachments to other persons in your address book as well as to other email addresses on the Internet without you opening up your mail client.  You do not have to send the message, and in fact a system is infected by a virus it is more likely that the virus itself will send out emails to further propogate itself to other systems.

If it is believed that you have a virus on your system, you should run a complete virus scan on your system.  It is recommended that all users of email install antivirus software given the proliferation of viruses these days.  If you do have antivirus software installed on your computer and it did not detect a virus, then you likely have out-of-date virus definitions.  See your AV software manufacturers documentation for instructions on how to update your definitions.  If you do not have antivirus software installed on your computer it is recommended that you obtain and install said software to protect your system against all viruses - If you do install antivirus software, it is very important to understand that virus definitions for the various AV software must be updated regularly for the antivirus software to effectively protect your system.

FIRST Internet does not provide antivirus support.  Furthermore, FIRST Internet does not guarantee or warranty that this Virus scanning software on our mail servers will remove all, or even any, viruses from incoming our outgoing mail.  This service is provided as a courtesy to our customers but cannot be guaranteed in any way.  It is the customer's responsibility to take preventative measures to ensure that their computer systems do not obtain viruses.

Below are links to a few popular antivirus sites.  There is no particular preference to these links.  Other antivirus software is available aside from that listed below, and it is totally your decision what, if any, antivirus software you choose to run.

http://cgi.f-secure.com/cgi-bin/search.cgi
http://www.symantec.com
http://www.antivirus.com

http://housecall.antivirus.com - real-time virus scanning

http://www.sarc.com - Virus information site

For any further questions regarding viruses please contact the various antivirus software sites or a computer professional whom you trust.

Thank you,

FIRST Internet