[Mapserver-users] [Fwd: [virusalert@mail.ci.collierville.tn.us: VIRUS (Worm/Bagle.F) FROM <mapserver-users-admin@lists.gis.umn.edu>]]

Jim Butcher jbutcher@ci.collierville.tn.us
Mon, 01 Mar 2004 11:55:43 -0600


--=-SFt1hQMV6OmNQtq8S1ZA
Content-Type: multipart/mixed; boundary="=-3g1RZTpV4/nCjDZBOK+l"


--=-3g1RZTpV4/nCjDZBOK+l
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

To the list administrator,

I don't know what the list administrator can do about this problem. An
individual subscriber is unwittingly sending the worm Bagle.F through
the list.  The traceback information supplied by my SysAdmin is
attached.

--=20
James H. Butcher, G.G.(GIA)
GIS Manager
Town of Collierville
Division of Planning
500 Poplar View Pkwy
Collierville, TN 38017
P: 901-457-2360
F: 901-457-2354
email: jbutcher@ci.collierville.tn.us

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GAT d+ s---:+ a+ C+++ UL++++ P+ L++ E--- W+++ N+ o+ K- w---
O M V PS-- PE++ Y+ PGP++ t++ 5++++ X++ R++ tv++ b++++ DI+++ D++
G e+++ h r y+
------END GEEK CODE BLOCK------


--=-3g1RZTpV4/nCjDZBOK+l
Content-Disposition: inline
Content-Description: Forwarded message -
	[virusalert@mail.ci.collierville.tn.us: VIRUS (Worm/Bagle.F) FROM
	<mapserver-users-admin@lists.gis.umn.edu>]
Content-Type: message/rfc822

Return-Path: <donski@ci.collierville.tn.us>
X-Original-To: jbutcher@ci.collierville.tn.us
Delivered-To: jbutcher@ci.collierville.tn.us
Received: from localhost (localhost.localdomain [127.0.0.1]) by
	mail.ci.collierville.tn.us (Postfix) with ESMTP id B809328304 for
	<jbutcher@ci.collierville.tn.us>; Mon,  1 Mar 2004 10:40:37 -0600 (CST)
Received: from mail.ci.collierville.tn.us ([127.0.0.1]) by localhost (mail
	[127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 26363-09 for
	<jbutcher@ci.collierville.tn.us>; Mon,  1 Mar 2004 10:40:35 -0600 (CST)
Received: from tuxbert.ci.collierville.tn.us (kevlar.ci.collierville.tn.us
	[168.215.127.126]) by mail.ci.collierville.tn.us (Postfix) with ESMTP id
	10BA728059 for <jbutcher@ci.collierville.tn.us>; Mon,  1 Mar 2004 10:40:35
	-0600 (CST)
Received: by tuxbert.ci.collierville.tn.us (Postfix, from userid 1000) id
	6A198448023; Mon,  1 Mar 2004 10:53:52 -0600 (CST)
Date: Mon, 1 Mar 2004 10:53:52 -0600
From: Don Petrowski <dpetrowski@ci.collierville.tn.us>
To: jbutcher@ci.collierville.tn.us
Subject: [virusalert@mail.ci.collierville.tn.us: VIRUS (Worm/Bagle.F) FROM
	<mapserver-users-admin@lists.gis.umn.edu>]
Message-ID: <20040301165352.GB14666@ci.collierville.tn.us>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="hHWLQfXTYDoKhP50"
Content-Disposition: inline
User-Agent: Mutt/1.5.6i
X-Virus-Scanned: by amavisd-new at mail
Status: 


--hHWLQfXTYDoKhP50
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

----- Forwarded message from virusalert@mail.ci.collierville.tn.us -----

X-Original-To: donski@localhost
Delivered-To: donski@localhost.ci.collierville.tn.us
X-Original-To: virusalert@mail
Delivered-To: compteam@ci.collierville.tn.us
Date: Mon,  1 Mar 2004 10:22:30 -0600 (CST)
=46rom: virusalert@mail.ci.collierville.tn.us
Subject: VIRUS (Worm/Bagle.F) FROM <mapserver-users-admin@lists.gis.umn.edu>
To: virusalert@mail.ci.collierville.tn.us

A virus (Worm/Bagle.F) was found.

Scanner detecting a virus: H+BEDV AntiVir or CentralCommand Vexira Antivirus

The mail originated from: <mapserver-users-admin@lists.gis.umn.edu>

According to the 'Received:' trace, the message originated at:
   khendricksb ([198.3.82.101])	=20

The message WAS NOT delivered to:
<jbutcher@ci.collierville.tn.us>:
   550 5.7.1 Message content rejected, id=3D25394-05 - VIRUS: Worm/Bagle.F

Virus scanner output:
   Vexira Antivirus / Linux Version 2.2.0-8
   Copyright (C) 2002-2004 Central Command, Inc. and/or its suppliers.
   Portions copyright (C) 1996-2004 H+BEDV Datentechnik GmbH.
   All rights reserved.
  =20
   Loading /usr/lib/Vexira/vexira.vdf ...
  =20
   VDF version: 6.24.0.29 created 01 Mar 2004
  =20
   Vexira Antivirus license: 2003000000 for Town of Collierville
  =20
   checking drive/path (list): /var/run/amavis/tmp/amavis-20040301T101754-2=
5394/parts
   ALERT: [Worm/Bagle.F worm] /var/run/amavis/tmp/amavis-20040301T101754-25=
394/parts/part-00002 <<< Contains signature of the worm Worm/Bagle.F
  =20
  =20
   ----- scan results -----
    directories:        1
          files:        2
         alerts:        1
       repaired:        0
        deleted:        0
        renamed:        0
      scan time: 00:00:01
   ------------------------
   Thank you for using Vexira Antivirus!

The message has been quarantined as:
   /var/virusmails

------------------------- BEGIN HEADERS -----------------------------
Return-Path: <mapserver-users-admin@lists.gis.umn.edu>
Received: from lists.gis.umn.edu (lists.gis.umn.edu [128.101.73.109])
	by mail.ci.collierville.tn.us (Postfix) with ESMTP id 4AD6A28059
	for <jbutcher@ci.collierville.tn.us>; Mon,  1 Mar 2004 10:22:21 -0600 (CST)
Received: from lists.gis.umn.edu (localhost [127.0.0.1])
	by lists.gis.umn.edu (8.12.10/8.12.10) with ESMTP id i21GMkAP017699;
	Mon, 1 Mar 2004 10:22:46 -0600 (CST)
Received: from khendricksb ([198.3.82.101])
	by lists.gis.umn.edu (8.12.10/8.12.10) with SMTP id i21GGqAQ017594
	for <mapserver-users@lists.gis.umn.edu>; Mon, 1 Mar 2004 10:16:57 -0600 (C=
ST)
To: mapserver-users@lists.gis.umn.edu
=46rom: kames@keyspanenergy.com
Message-ID: <uaxtcpwyetbmeoymkmp@keyspanenergy.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary=3D"--------lldoemeixdgjjmjycago"
Subject: [Mapserver-users] Tammy
Sender: mapserver-users-admin@lists.gis.umn.edu
Errors-To: mapserver-users-admin@lists.gis.umn.edu
X-BeenThere: mapserver-users@lists.gis.umn.edu
X-Mailman-Version: 2.0.13
Precedence: bulk
List-Unsubscribe: <http://lists.gis.umn.edu/mailman/listinfo/mapserver-user=
s>,
	<mailto:mapserver-users-request@lists.gis.umn.edu?subject=3Dunsubscribe>
List-Id: Mapserver Users Mailing List (Appropriate for general users) <maps=
erver-users.lists.gis.umn.edu>
List-Post: <mailto:mapserver-users@lists.gis.umn.edu>
List-Help: <mailto:mapserver-users-request@lists.gis.umn.edu?subject=3Dhelp>
List-Subscribe: <http://lists.gis.umn.edu/mailman/listinfo/mapserver-users>,
	<mailto:mapserver-users-request@lists.gis.umn.edu?subject=3Dsubscribe>
List-Archive: <http://lists.gis.umn.edu/pipermail/mapserver-users/>
Date: Mon, 01 Mar 2004 10:33:19 -0600
-------------------------- END HEADERS ------------------------------

----- End forwarded message -----

--=20
Don Petrowski
Town of Collierville
Network Administrator

500 Poplar View Pkwy
Collierville, TN 38017

Phone: (901) 457-2260
Fax:   (901) 457-2246

--BEGIN GEEK CODE BLOCK --
Version: 3.12
GIT/IT d- s:++>+ a>? C+$ LS++$ P+>+++ L+++$>++++$ E? W+=20
N++ o? K? w! O? M- V? PS PE Y+(++) PGP++ t+>++ 5+@+++=20
X+@+++ R* tv+ b>++ DI++++ D+ G e++>++++ h r+++ y++++=20
-- END GEEK CODE BLOCK --

--hHWLQfXTYDoKhP50
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAQ2qgcCMgncA57gARAo91AKCEIaFmAUt+m69cK62COM846rybpwCdF2tC
a2mdF6iSkT/CnXImpcABuvw=
=UT+U
-----END PGP SIGNATURE-----

--hHWLQfXTYDoKhP50--

--=-3g1RZTpV4/nCjDZBOK+l--

--=-SFt1hQMV6OmNQtq8S1ZA
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQBAQ3kfmYYXQhPwN5ARAn16AJ9X3vsRp4tYzzeMtnNPuB0/NdKywACfeWLE
GUA2wcSdozndOpeByiqlt/M=
=+VMG
-----END PGP SIGNATURE-----

--=-SFt1hQMV6OmNQtq8S1ZA--

_______________________________________________
Mapserver-users mailing list
Mapserver-users@lists.gis.umn.edu
http://lists.gis.umn.edu/mailman/listinfo/mapserver-users