virus z adresy linux na linux.cz

Miroslav Kolombo kolombo na kolombo.cz
Neděle Srpen 31 15:36:03 CEST 2003


Podle nasledujiciho vypisu hlavicky
me nekdo, kdo ma pristup k PC:
odysseus.linux.cz (odysseus.fi.muni.cz [147.251.48.205])
zasobuje virem a tvari se to jako mail z konference.
(I-Worm/Dumaru)

Da se nejak vystopovat, ktery dobrak to je?

Miroslav Kolombo
kolombo na kolombo.cz

Hlavicka mailu
******************
X-Envelope-To: <kolombo na kolombo.cz>
Return-Path: <linux-return-197776-kolombo=kolombo.cz na linux.cz>
Received: from odysseus.linux.cz (odysseus.fi.muni.cz [147.251.48.205])
 by bus.isp.contactel.cz (8.11.3/8.11.3) with SMTP id h7UDsws24150
 for <kolombo na kolombo.cz>; Sat, 30 Aug 2003 15:54:58 +0200 (MEST)
Received: (qmail 7724 invoked by uid 30); 30 Aug 2003 13:54:47 -0000
Mailing-List: contact linux-help na linux.cz; run by ezmlm
Precedence: bulk
Reply-To: linux na linux.cz
Delivered-To: mailing list linux na linux.cz
Received: (qmail 7695 invoked from network); 30 Aug 2003 13:54:44 -0000
Date: Sat, 30 Aug 2003 15:54:39 +0200
Message-Id: <200308301354.h7UDsdsW026990 na anor.ics.muni.cz>
From: "Microsoft" <security na microsoft.com>
To: <linux na muni.cz>
Subject: Use this patch immediately !
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="xxxx"
X-Muni-Spam-TestIP: 62.135.19.11
X-MIME2LATIN2: 2 MIME parts converted to iso-8859-2
Status:  O

--xxxx
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 8bit

Dear friend , use this Internet Explorer patch now!
There are dangerous virus in the Internet now!
More than 500.000 already infected!

--xxxx
Content-Type: application/download
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=patch.exe





Další informace o konferenci Linux