|
| From: | Postmaster |
| Subject: | E-Mail Message Contained a Virus |
| Date: | Fri,26 Jul 2002 10:32:59 -0700 |
You are receiving this message because UCSD mechanically scans its mail for embedded viruses, and an e-mail message addressed to you was found to be infected. This does NOT mean that anything is wrong with your computer.
The original e-mail attachment was titled
setup.exe
and is believed to be infected by a virus or worm program.
Our virus scanner reported
VIRUS W32/Klez-H ³/var/run/sophosdFound in file ./g6QHWZ4F091205/setup.exe
.
That part of the mail has been removed from the message and quarantined. The remainder of the message is attached below.
The ***INFECTED*** attachment will be held in quarantine for 30 days. After that time, it will be deleted and will no longer be available. If you do not want a copy of the attachment, you need do nothing further and it will be destroyed automatically.
The mail scanner program may (rarely) remove a valid portion of a message which resembles a known virus. If you need to retrieve a copy of the deleted message part, you may download the quarantined file within the next 40 days. Your mail client program may offer to do this for you, as an external part of this message, or the file may be retrieved via the URL below or by manual FTP. Your system administrator may be able to help you with this.
Although we have taken steps to reduce the danger from the virus embedded in it, the file may remain infectious. Before downloading the file, please visit our web pages regarding e-mail viruses, and how to restore a quarantined message part.
If you do download the quarantined file, please use
EXTREME CARE in handling it.
ftp://mailbox2.ucsd.edu/quarantine/2c59076e40293815b68caa9ee7565ad8.gz
Click Here for information about other UCSD ACS Network Operations services.
Please note that the To: and From: addresses in viral E-mail are often false, forgeries, or have been chosen at random from lists of mailbox names. It is not unusual for the author or site shown in the message to have no knowledge or actual responsibility for the message you received.
--- Begin Message ---Content-Type: text/html; Content-Transfer-Encoding: quoted-printable <HTML><HEAD></HEAD><BODY> <FONT>W32.Klez.E is a very dangerous virus that spread through email.<br> Kaspersky give you the very W32.Klez.E removal tools<br> <br> For more information,please visit http://www.Kaspersky.com</FONT></BODY></H= TML> Content-Type: Message/External-Body; Access-Type="ANON-FTP"; Site="mailbox2.ucsd.edu"; Directory="/quarantine"; Name="/quarantine/2c59076e40293815b68caa9ee7565ad8.gz"; Expiration="Sun,25 Aug 2002 10:32:59 -0700"; Mode="IMAGE" Content-Disposition: Attachment Content-Transfer-Encoding: binary Content-Description: "Quarantined file setup.exe" Content-Type: Application/Octet-Stream; Filename="/var/ftp/quarantine/2c59076e40293815b68caa9ee7565ad8.gz" Content-ID: <g6QHWZ4F091205> Content-Transfer-Encoding: Binary Content-Description: "CAUTION: Infected file" Content-Type: application/octet-stream; name=README.TXT Content-Transfer-Encoding: base64 Content-ID: <P7C7VX2sW> ICAgICAgICAgICAgIERyaXZydXRpbiB0aWxsIFN5bmFwdGljcyBUb3VjaHBhZCBm9nIgV2lu ZG93cyAyMDAwDQogICAgICAgICAgICAgICAgICAgICAgIEluc3RhbGxhdGlvbnNhbm3kcmtu aW5nDQogICAgICAgICAgICAgICAgICAgICAgICAgVmVyc2lvbiA2LjAuMQ0KDQoxLiBJbnN0 YWxsZXJhIGRyaXZydXRpbmVuIHRpbGwgU3luYXB0aWNzIFRvdWNoUGFkDQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRlbiBo5HIgZHJp dnJ1dGluZW4ga3LkdmVyIFdpbmRvd3MgMjAwMC4NCg0KQU5NxFJLTklORyBG1lIgQVRUIFNQ QVJBIElOU1TETExOSU5HQVI6DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLQ0KV2luZG93cyAyMDAwIHNwYXJhciBpbnRlIG7lZ3JhIGFuduRuZGFyaW5zdORsbG5p bmdhciBm9nIgYW525G5kYXJlIHNvbSB0aWxsaPZyDQpncnVwcGVuICJH5HN0ZXIiLiBEZXQg aORyIGfkbGxlciBzcGVjaWVsbGEgVG91Y2hQYWQtaW5zdORsbG5pbmdhciBz5XbkbCBzb20N CmFuZHJhIGFuduRuZGFyaW5zdORsbG5pbmdhci4gT20gZHUgdmlsbCBzcGFyYSBkaW5hIGlu c3TkbGxuaW5nYXIsIA0Ka29udHJvbGxlcmFyIGR1IGF0dCBkaXR0IGFuduRuZGFya29udG8g aW50ZSB0aWxsaPZyIGdydXBwZW4gIkfkc3RlciIgdmlhIA0KcHJvZ3JhbW1ldCBBbnbkbmRh cmhhbnRlcmFyZW4gKGR1IG3lc3RlIHZhcmEgQWRtaW5pc3RyYXT2ciBm9nIgYXR0IORuZHJh DQphbnbkbmRhcmluc3TkbGxuaW5nYXIpLg0KDQpBTk3EUktOSU5HIEbWUiBNVUxUSVBST0NF U1NPUkRBVE9SRVI6DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQrE dmVuIG9tIHZpIHRyb3IgYXR0IGRlbiBo5HIgZHJpdnJ1dGluZW4gc2t1bGxlIGZ1bmdlcmEg cOUgbXVsdGlwcm9jZXNzb3JkYXRvcmVyIA0KaGFyIHZpIGludGUgdGVzdGF0IGRldHRhLg0K DQpJbnN0YWxsYXRpb25zcHJvY2VkdXI6DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpG9nIg ZGV0IGb2cnN0YSwgb20gZHUgaGFyIGVuIG55IFRvdWNoUGFkIGtvcHBsYXIgZHUgaW4gZGVu IG9jaCBzdGFydGFyIG9tDQpXaW5kb3dzIDIwMDAuIFdpbmRvd3MgMjAwMCBpZGVudGlmZXJh ciBzZWRhbiBkaW4gbnlhIFRvdWNoUGFkIG9jaCBpbnN0YWxsZXJhciBlbiANCnN0YW5kYXJk IG11c2RyaXZydXRpbiBzb20gaGFudGVyYXIgZGVuLiBEdSBrYW4gaW50ZSBpbnN0YWxsZXJh IGRyaXZydXRpbmVuIHRpbGwgDQpTeW5hcHRpY3MgVG91Y2hQYWQgZvZycuRuIGRlbiBo5HIg cHJvY2Vzc2VuIORyIGtsYXIgb2NoIGRpbiBUb3VjaFBhZCBmdW5nZXJhciBzb20gDQpldHQg bm9ybWFsdCBwZWtkb24uDQoNCkxvZ2dhIHDlIHN5c3RlbWV0IHNvbSAiQWRtaW5pc3RyYXT2 ciIgZWxsZXIgc29tIGVuIGFubmFuIGFuduRuZGFyZSBtZWQNCmFkbWluaXN0cmF09nJzYmVo 9nJpZ2hldC4NCg0KS/ZyICJTZXR1cC5leGUiLiBEZXQgaORyIHByb2dyYW1tZXQgaW5zdGFs bGVyYXIgYXV0b21hdGlza3QgZHJpdnJ1dGluZW4gdGlsbCANClN5bmFwdGljcyBUb3VjaFBh ZCBz5SBhdHQgZGVuIGhhbnRlcmFyIGFsbGEgUFMvMi1wZWtkb24gb2NoIHNlcmllbGxhIHBl a2RvbiBzb20gDQpoYXIgYW5zbHV0aXRzIHRpbGwgZGF0b3JuLg0KDQpEdSBt5XN0ZSBzdGFy dGEgb20gV2luZG93cyBlZnRlciBhdHQgaW5zdGFsbGF0aW9uZW4g5HIga2xhci4gT20gZHJp dnJ1dGluZW4gaGFyIA0KaW5zdGFsbGVyYXRzIHLkdHQsIGL2ciBkdSBzZSBUb3Vja1BhZC1p a29uZW4gaSBha3Rpdml0ZXRzZuRsdGV0IGJyZWR2aWQga2xvY2thbiANCmVmdGVyIGF0dCBk dSBoYXIgc3RhcnRhIG9tIFdpbmRvd3MuIERlc3N1dG9tIHZpc2FzIGVuIGRpYWxvZ3J1dGEg bWVkIG5hbW5ldCANCiJJbmZvcm1hdGlvbiBhYm91dCB5b3VyIFRvdWNoUGFkIi4gRHUga2Fu IGb2cmhpbmRyYSBhdHQgZGVuIGjkciBkaWFsb2dydXRhbiB2aXNhcyANCmkgZnJhbXRpZGVu IGdlbm9tIGF0dCBtYXJrZXJhIGtyeXNzcnV0YW4gIlN0b3Agc2hvd2luZyBtZSB0aGlzIG1l c3NhZ2UiLg0KDQpPbSBkdSB2aWxsIGhhIGhq5GxwIG9tIGh1ciBkdSBhbnbkbmRlciBUb3Vj aFBhZCwgduRsamVyIGR1ICJUZWxsIG1lIG1vcmUuLi4iIGkgDQpkaWFsb2dydXRhbiAiSW5m b3JtYXRpb24gYWJvdXQgeW91ciBUb3VjaFBhZCIsIGVsbGVyIGR1YmJlbGtsaWNrYSBw5SAN ClRvdWNoUGFkLWlrb25lbiBpIGFrdGl2aXRldHNm5Gx0ZXQgb2NoIGtsaWNrYSBw5SBrbmFw cGVuICJIauRscCIuDQoNCk9tIGR1IHZpbGwg5G5kcmEgZW4gZWxsZXIgZmxlcmEgYXYgZGlu YSBwZWtkb24gc+UgYXR0IGRlIGFuduRuZGVyIGVuIGFubmFuIA0KZHJpdnJ1dGluIORuIHN0 YW5kYXJkIE1pY3Jvc29mdCBlbGxlciBlbiBkcml2cnV0aW4gZnLlbiB0cmVkamUgcGFydCBz a2EgZHUg9nBwbmEgDQpNdXNpa29uZW4gaSBLb250cm9sbHBhbmVsZW4gb2NoIHbkbGphIGZs aWtlbiAiQWxsbeRudCIuIETkciB25GxqZXIgZHUgcGVrZG9uZXQgDQpzb20gZHUgdmlsbCDk bmRyYSBvY2gga2xpY2thciBw5SAixG5kcmEuLi4iLiBEdSBrYW4gc2VkYW4gduRsamEgZW4g YW5uYW4gDQpkcml2cnV0aW4gc29tIHNrYSBoYW50ZXJhIGVuaGV0ZW4uDQ=9
--- End Message ---
| [Prev in Thread] | Current Thread | [Next in Thread] |