[SMAUG] Re: Virus (fwd)

[Kevin Scott London <london@cs.utk.edu>]

I recieved this note this morning, looks like we shouldn't be having
virus problems again at least for a while. 
Nivek :)




Good morning Sir,
thanks for the information,we traced back to the account of the  responsible
of message so we are acting against that account.


regards
Valentina Vacca
Tiscali S.p.A
abuse@tiscalinet.it



----- Original Message -----
From: "Kevin Scott London" <london@cs.utk.edu>
Newsgroups: local.tiscali.abuse
Sent: Wednesday, December 20, 2000 11:55 PM
Subject: Virus


>
> Hi,
> I am hoping that you can help me.  I have had a person spoofing
> email, so it looks like it comes from london@cs.utk.edu.  They are sending
> viruses to a mailing list (smaug@game.org) that I moderate.  If you could
> look into this and see if they are indeed spoofing email addresses using
> your machines I would appreciate it.  The email address they are spoofing
> is as follows:  london@cs.utk.edu
>
> Thanks,
> Kevin
>
> : Kevin London   Internet: london@cs.utk.edu
> : Research Associate, Department of Computer Science
> : Claxton 322      Phone: (865) 974-6317
> : University of Tennessee, Knoxville
>
>
> ---------- Forwarded message ----------
> Date: Wed, 20 Dec 2000 17:33:25 -0500 (EST)
> From: altrag@realms.game.org
> To: london@cs.utk.edu
> Subject: You've got a secret admirer :P
>
> just got a nice email with no sender/subject/body and a single attachment
> "IFLONIIF.EXE".. doing a nice text edit on my mail file reveals the
> following (countless lines of attachment text removed of course:)..
> dunno if this is the same guy who was impersonating you on the list or
> not.. but thought I'd send it to ya just in case..
>
>
> >From london@cs.utk.edu  Wed Dec 20 11:34:04 2000
> Return-Path: <>
> Received: from dbs (fi1-910.dialup.tiscalinet.it [62.11.37.142])
>         by realms.game.org (8.9.3/8.9.3) with SMTP id LAA25537
>         for <smaug@game.org>; Wed, 20 Dec 2000 11:31:38 -0500
> Date: Wed, 20 Dec 2000 11:31:38 -0500
> Message-Id: <200012201631.LAA25537@realms.game.org>
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="--VE2Z0HA741YRK5ER4PU7"
>
> ----VE2Z0HA741YRK5ER4PU7
> Content-Type: text/plain; charset="us-ascii"
>
>
>
> ----VE2Z0HA741YRK5ER4PU7
> Content-Type: application/octet-stream; name="IFLONIIF.EXE"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment; filename="IFLONIIF.EXE"
>
>
> --------------------------------------------------
> Law of cookie theft:
>   Your parents may not notice one missing from 20,
>   They will notice 1/2 missing from 200.
>
>
> .
>