These are disguised email viruses (in this case used WG6.6 mailing list). The messages have various subjects such as "Thanks!", "Yahoo", etc.
raouf
-----Original Message----- From: ifip-tc6-bounces@lists.RWTH-Aachen.DE [mailto:ifip-tc6-bounces@lists.RWTH-Aachen.DE] On Behalf Of Radford, Peter Sent: Friday, March 19, 2004 5:14 AM To: TC6 (E-mail) Subject: [ifip-tc6] FW: WARNING. Someone tried to send you a potential virus or unaut horised code Importance: High
To all
Just in case your virus checkers haven't picked it up, I received this and another similar message relating to two messages which were claimed to come from ifip_nm@bbcr.uwaterloo.ca. I've also had a third message apparently from the same source and entitled "[ifip-tc6] Mailman results for IFIP_NM", which did get through but which I think I shall ignore!
Peter
Peter Radford UK Representative to IFIP TC6
T: +44 20 7446 1281 M: Peter.Radford@LogicaCMG.com mailto:Peter.Radford@LogicaCMG.com
-----Original Message----- From: alert@notification.messagelabs.com [mailto:alert@notification.messagelabs.com] Sent: 19 March 2004 09:50 Subject: WARNING. Someone tried to send you a potential virus or unauthorised code
The MessageLabs SkyScan Anti-Virus service discovered a possible virus or unauthorised code (such as a joke program or trojan) in an email sent to you.
The email has now been quarantined and was not delivered.
Please read the whole of this email carefully. It explains what has happened to your email, which suspected virus has been caught, and what to do if you need help.
To help identify the quarantined email:
The message recipients were Peter.Radford@logicacmg.com
The message senders were ifip-tc6-bounces@lists.RWTH-Aachen.DE ifip_nm@bbcr.uwaterloo.ca
and they have been notified that they have sent a potential virus. The message title was [ifip-tc6] Re: Document The message date was Fri, 19 Mar 2004 17:12:06 +0900 The virus or unauthorised code identified in the email is /var/qmail/queue/split/1/attach/3352173_1X_PM2_EM7_MH__message.htm Found the W32/Bagle.eml!ms03-032 virus !!!
Some viruses forge the sender address. For more information please visit the link to the virus FAQ's at the bottom of this page.
The message was diverted into the virus holding pen on mail server server-8.tower-36.messagelabs.com (pen id 3352173_1079689804) and will be held for 30 days before being destroyed
Please contact your IT Helpdesk or Support Department for further assistance.
You may like to read the virus FAQ's at: http://www.messagelabs.com/page.asp?id=628 which will answer most virus related questions.
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
_______________________________________________ ifip-tc6 mailing list ifip-tc6@lists.RWTH-Aachen.DE http://MailMan.RWTH-Aachen.DE/mailman/listinfo/ifip-tc6