Re: Please virus scan your systems

[Matt Southworth <snort-users () mmsw org>]

Bryan Irvine <bryan.irvine () kingcountyjournal com> wrote on Wed, Feb 11, 2004 at 11:30:14AM -0800:
¡ about the only virus that can get through this list is the honor system
¡ virus, whereupon receiving it, you delete a bunch of random files,
¡ forward the emal, and reboot.
¡ 
¡ Those virus alert are most likely the cause of someone you've emailed
¡ sometime in your life getting mydoom or a similar virus.  It's pretty
¡ simple to tell if it came from this list, look for attachements.
¡ 
¡ It's a coincidence move on.

I've got to say this doesn not coincide with my experience. Starting
about 2 weeks ago I've received more than a dozen infected emails to 
the address I use ONLY for snort-users (see above...) - this adress
only appears on google in archives of the mailing list. It could be
spam harvested from that, I suppose, but I think it's more likely
that someone who at one time subscribed to this list is or was 
infected.

It's the virus masquerading as an MS "February 2004, Cumulative Patch".

It doesn't come *through* the list, but from a subscriber who's
also an idiot.

-Matt

I tried to view the attachment but Mutt said 
application/x-msdownload is unsupported ...

--
Matthew Southworth
B621 BA09 2169 953A 44F0  B0EB 12C2 656D 0DE0 CEEC


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id56&alloc_id438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users