mydoom

From: Jeremiah Johnson <johns839_at_casews.com> · Date: Mon, 2 Feb 2004 11:04:11 -0500

Just thought everyone might like to know that it looks like a virus made it
onto the maillist. My scanners caught this:

A virus was found in an email from:

   comedi-admin_at_comedi.org

The message was addressed to:

-> johns839_at_casews.com

The message has been quarantined as:

   /var/virusmails/virus-20040201-192317-29289

Here is the output of the scanner:

/var/amavis/amavis-03315155/parts/msg-29289-1.txt: OK
/var/amavis/amavis-03315155/parts/msg-29289-2.txt: OK
/var/amavis/amavis-03315155/parts/msg-29289-3.scr: Worm.SCO.A FOUND

----------- SCAN SUMMARY -----------
Known viruses: 20606
Scanned directories: 1
Scanned files: 3
Infected files: 1
Data scanned: 0.02 Mb
I/O buffer size: 131072 bytes
Time: 2.307 sec (0 m 2 s)

Here are the headers:

------------------------- BEGIN HEADERS -----------------------------
Received: from comedi.org (comedi.ucsf.edu [128.218.64.140])
by webcase.casews.com (Postfix) with ESMTP id D52801300F
for <johns839_at_casews.com>; Sun,  1 Feb 2004 19:23:09 -0500 (EST)
Received: from localhost ([127.0.0.1] helo=comedi.org)
by comedi.org with esmtp (Exim 3.35 #1 (Debian))
id 1AnRj8-0000dU-00; Sun, 01 Feb 2004 16:14:10 -0800
Received: from mail by comedi.org with spam-scanned (Exim 3.35 #1 (Debian))
id 1AnRhw-0000d7-00
for <comedi_at_comedi.org>; Sun, 01 Feb 2004 16:12:59 -0800
Received: from localhost [127.0.0.1] by comedi.org
with SpamAssassin (2.61 1.212.2.1-2003-12-09-exp);
Sun, 01 Feb 2004 16:12:59 -0800
From: oer_at_force.dk
To: comedi_at_comedi.org
Message-Id: <E1AnRhu-0000d3-00_at_comedi.org>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
comedi.org
X-Spam-Status: Yes, hits=8.2 required=5.0
tests=BAYES_90,MICROSOFT_EXECUTABLE,
MISSING_MIMEOLE,MSGID_FROM_MTA_SHORT,NO_REAL_NAME,PRIORITY_NO_NAME
autolearn=no version=2.61
X-Spam-Level: ********
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_401D960B.8671BE70"
Subject:  Status
Sender: comedi-admin_at_comedi.org
Errors-To: comedi-admin_at_comedi.org
X-BeenThere: comedi_at_comedi.org
X-Mailman-Version: 2.0.11
Precedence: bulk
List-Help: <mailto:comedi-request_at_comedi.org?subject=help>
List-Post: <mailto:comedi_at_comedi.org>
List-Subscribe: <https://cvs.comedi.org/cgi-bin/mailman/listinfo/comedi>,
<mailto:comedi-request_at_comedi.org?subject=subscribe>
List-Id: Comedi <comedi.comedi.org>
List-Unsubscribe: <https://cvs.comedi.org/cgi-bin/mailman/listinfo/comedi>,
<mailto:comedi-request_at_comedi.org?subject=unsubscribe>
List-Archive: <https://cvs.comedi.org/pipermail/comedi/>
Date: Mon, 2 Feb 2004 08:27:53 +0800
-------------------------- END HEADERS ------------------------------