RE: VIRUS ALERT, do not open attached ZIP file from Oracle-L member

  • From: Michael Thomas <mhthomas@xxxxxxxxx>
  • To: oracle-l@xxxxxxxxxxxxx
  • Date: Fri, 9 Jul 2004 07:20:16 -0700 (PDT)

Hi,

If I remember, it was long ago since I've seen it
done, the spoofer might need access to the mail server
host. Given access to the mail server host its
trivial.

So, you might suggest to your SA that their mail
server host access is compromised. And, worse than
that it might be compromised by someone launching MS
viruses (which might not alert on xNIX antivirus, if
any).

The McAfee message log from the email says:
08/07/2004      9:37 PM Deleted W2KSERV123\Administrator
J:\temp\Cache\FC3999B4d01       W32/Bagle.gen!pwdzip
08/07/2004      9:37 PM Deleted W2KSERV123\Administrator
C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\olriiivt
W32/Bagle.gen!pwdzip

HTH. Good luck catching up with them. :-)

Regards,

Mike 

--- "Goulet, Dick" <DGoulet@xxxxxxxx> wrote:
> Mike,
> 
>       You can easily assume that the mail message was
> spoofed.  Our mail =


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Other related posts:

  1. Home
  2. oracle-l
  3. Archive
  4. 07-2004