|
| From: | Postmaster |
| Subject: | E-Mail Message Contained a Virus |
| Date: | Wed, 7 Aug 2002 06:29:08 -0700 |
You are receiving this message because UCSD mechanically scans its mail for embedded viruses, and an e-mail message addressed to you was found to be infected. This does NOT mean that anything is wrong with your computer.
The original e-mail attachment was titled
README.scr
and is believed to be infected by a virus or worm program.
Our virus scanner reported
VIRUS W32/Klez-H Found in file ./g77DT4E2052175/README.scr
.
That part of the mail has been removed from the message and quarantined. The remainder of the message is attached below.
The ***INFECTED*** attachment will be held in quarantine for 30 days. After that time, it will be deleted and will no longer be available. If you do not want a copy of the attachment, you need do nothing further and it will be destroyed automatically.
The mail scanner program may (rarely) remove a valid portion of a message which resembles a known virus. If you need to retrieve a copy of the deleted message part, you may download the quarantined file within the next 40 days. Your mail client program may offer to do this for you, as an external part of this message, or the file may be retrieved via the URL below or by manual FTP. Your system administrator may be able to help you with this.
Although we have taken steps to reduce the danger from the virus embedded in it, the file may remain infectious. Before downloading the file, please visit our web pages regarding e-mail viruses, and how to restore a quarantined message part.
If you do download the quarantined file, please use
EXTREME CARE in handling it.
ftp://mailbox1.ucsd.edu/quarantine/858fde50ecc475932c366feae91459ef.gz
Click Here for information about other UCSD ACS Network Operations services.
Please note that the To: and From: addresses in viral E-mail are often false, forgeries, or have been chosen at random from lists of mailbox names. It is not unusual for the author or site shown in the message to have no knowledge or actual responsibility for the message you received.
--- Begin Message ---Content-Type: text/html; Content-Transfer-Encoding: quoted-printable <HTML><HEAD></HEAD><BODY> <iframe src=3Dcid:C36I8W81u8pv6G02ZI4 height=3D0 width=3D0> </iframe> <FONT></FONT></BODY></HTML> Content-Type: Message/External-Body; Access-Type="ANON-FTP"; Site="mailbox1.ucsd.edu"; Directory="/quarantine"; Name="/quarantine/858fde50ecc475932c366feae91459ef.gz"; Expiration="Fri, 6 Sep 2002 06:29:08 -0700"; Mode="IMAGE" Content-Disposition: Attachment Content-Transfer-Encoding: binary Content-Description: "Quarantined file README.scr" Content-Type: Application/Octet-Stream; Filename="/var/ftp/quarantine/858fde50ecc475932c366feae91459ef.gz" Content-ID: <g77DT4E2052175> Content-Transfer-Encoding: Binary Content-Description: "CAUTION: Infected file" Content-Type: application/octet-stream; name=README.TXT Content-Transfer-Encoding: base64 Content-ID: <C36I8W81u8pv6G02ZI4> ICAgICAgICAgICAgIFN5bmFwdGljcyBUb3VjaHBhZCBEcml2ZXIgZm9yIFdpbmRvd3MgMjAw MA0KICAgICAgICAgICAgICAgICAgICAgICAgSW5zdGFsbGF0aW9uIE5vdGVzDQogICAgICAg ICAgICAgICAgICAgICAgICAgVmVyc2lvbiA2LjAuMQ0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgDQoxLiBJbnN0YWxsaW5nIHRoZSBTeW5hcHRpY3MgVG91Y2hQYWQgRHJpdmVy DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNClRoaXMg ZHJpdmVyIHJlcXVpcmVzIFdpbmRvd3MgMjAwMC4NCg0KTk9URSBSRUdBUkRJTkcgU0FWSU5H IE9GIFNFVFRJTkdTOg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KV2lu ZG93cyAyMDAwIGRvZXMgbm90IHNhdmUgYW55IG9mIHRoZSB1c2VyIHNldHRpbmdzIGZvciB1 c2VycyBiZWxvbmdpbmcNCnRvIHRoZSAiR3Vlc3RzIiB1c2VyIGdyb3VwLiBUaGlzIGluY2x1 ZGVzIHNwZWNpYWwgVG91Y2hQYWQgc2V0dGluZ3MgYXMNCndlbGwgYXMgYWxsIG90aGVyIHVz ZXIgc2V0dGluZ3MuIElmIHlvdSB3YW50IHlvdXIgc2V0dGluZ3MgdG8gYmUgc2F2ZWQsDQpt YWtlIHN1cmUgeW91ciB1c2VyIGFjY291bnQgZG9lcyBub3QgYmVsb25nIHRvIHRoZSAiR3Vl c3RzIiBncm91cA0KdXNpbmcgdGhlIFVzZXIgTWFuYWdlciBwcm9ncmFtICh5b3UgbXVzdCBi ZSBBZG1pbmlzdHJhdG9yIHRvIGNoYW5nZQ0KdXNlciBzZXR0aW5ncykuDQoNCk5PVEUgUkVH QVJESU5HIE1VTFRJUFJPQ0VTU09SIE1BQ0hJTkVTOg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQpUaG91Z2ggd2UgYmVsaWV2ZSBpdCBzaG91bGQgd29yaywg dGhpcyBkcml2ZXIgaGFzIG5vdCBiZWVuIHRlc3RlZCBvbiANCmFueSBtdWx0aXByb2Nlc3Nv ciBtYWNoaW5lcy4NCg0KSW5zdGFsbGF0aW9uIHByb2NlZHVyZQ0KLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRmlyc3QsIGlmIHlv dSBoYXZlIGEgbmV3IFRvdWNoUGFkLCBwbHVnIGl0IGluIGFuZCByZWJvb3QgV2luZG93cyAy MDAwLg0KV2luZG93cyAyMDAwIHdpbGwgdGhlbiBkZXRlY3QgeW91ciBuZXcgVG91Y2hQYWQg YW5kIGluc3RhbGwgYSBzdGFuZGFyZA0KbW91c2UgZHJpdmVyIHRvIGhhbmRsZSBpdC4gWW91 IGNhbm5vdCBpbnN0YWxsIHRoZSBTeW5hcHRpY3MgVG91Y2hQYWQNCmRyaXZlciB1bnRpbCB0 aGlzIHByb2Nlc3MgaXMgY29tcGxldGUgYW5kIHlvdXIgVG91Y2hQYWQgaXMgZnVuY3Rpb25p bmcNCmFzIGEgbm9ybWFsIHBvaW50aW5nIGRldmljZS4NCg0KTG9nIG9uIHRvIHlvdXIgc3lz dGVtIGFzICJBZG1pbmlzdHJhdG9yIiwgb3IgYXMgYW5vdGhlciB1c2VyIHdpdGggDQphZG1p bmlzdHJhdG9yIHByaXZpbGVnZXMuIA0KDQpSdW4gIlNldHVwLmV4ZSIuIFRoaXMgcHJvZ3Jh bSB3aWxsIGF1dG9tYXRpY2FsbHkgaW5zdGFsbCB0aGUgU3luYXB0aWNzDQpUb3VjaFBhZCBk cml2ZXIgdG8gaGFuZGxlIGFsbCBQUy8yIGFuZCBTZXJpYWwgcG9pbnRpbmcgZGV2aWNlcw0K YXR0YWNoZWQgdG8geW91ciBjb21wdXRlci4NCg0KWW91IHdpbGwgbmVlZCB0byByZXN0YXJ0 IFdpbmRvd3MgYWZ0ZXIgdGhlIGluc3RhbGxhdGlvbiBpcyBjb21wbGV0ZS4NCklmIHRoZSBk cml2ZXIgaGFzIGJlZW4gaW5zdGFsbGVkIGNvcnJlY3RseSwgYWZ0ZXIgeW91IGhhdmUgcmVz dGFydGVkIA0KV2luZG93cyB5b3Ugc2hvdWxkIHNlZSB0aGUgVG91Y2hQYWQgSWNvbiBpbiB5 b3VyIHRhc2sgYmFyIG5leHQgdG8gdGhlIA0KY2xvY2suICBBbHNvLCBhIGRpYWxvZyBib3gg ZW50aXRsZWQgIkluZm9ybWF0aW9uIGFib3V0IHlvdXIgVG91Y2hQYWQiIA0Kd2lsbCBwb3Ag dXAuIFlvdSBjYW4gcHJldmVudCB0aGlzIGRpYWxvZyBib3ggZnJvbSBjb21pbmcgdXAgaW4g dGhlIA0KZnV0dXJlIGJ5IGNoZWNraW5nIHRoZSAiU3RvcCBzaG93aW5nIG1lIHRoaXMgbWVz c2FnZSIgY2hlY2tib3guIA0KDQpGb3IgaGVscCB1c2luZyB5b3VyIFRvdWNoUGFkLCBjaG9v c2UgIlRlbGwgbWUgbW9yZS4uLiIgZnJvbSB0aGUNCiJJbmZvcm1hdGlvbiBhYm91dCB5b3Vy IFRvdWNoUGFkIiBkaWFsb2cgYm94LCBvciBkb3VibGUtY2xpY2sgb24gdGhlDQpUb3VjaFBh ZCBJY29uIGluIHlvdXIgdGFzayBiYXIsIGFuZCBjbGljayBvbiB0aGUgIkhlbHAiIGJ1dHRv bi4NCg0KSWYgeW91IHdpc2ggdG8gY2hhbmdlIG9uZSBvciBtb3JlIG9mIHlvdXIgcG9pbnRp bmcgZGV2aWNlcyB0byB1c2luZyANCmEgc3RhbmRhcmQgTWljcm9zb2Z0IG9yIG90aGVyIHRo aXJkIHBhcnR5IGRyaXZlciwgeW91IHNob3VsZCBicmluZw0KdXAgdGhlIE1vdXNlIGNvbnRy b2wgcGFuZWwsIGFuZCBzZWxlY3QgdGhlICJIYXJkd2FyZSIgdGFiLiBGcm9tIHRoZXJlLA0K c2VsZWN0IHRoZSBwb2ludGluZyBkZXZpY2UgeW91IHdhbnQgdG8gY2hhbmdlIGFuZCBjbGlj ayAiUHJvcGVydGllcyIuDQpTZWxlY3QgdGhlICJEcml2ZXIiIHRhYiBhbmQgQ2xpY2sgIlVw ZGF0ZSBEcml2ZXIuLi4iLiBGb2xsb3cgdGhlIA0KaW5zdHJ1Y3Rpb25zIHRvIGluc3RhbGwg YSBuZXcgZHJpdmVyLg0K
--- End Message ---
| [Prev in Thread] | Current Thread | [Next in Thread] |