RE: VIRUS ALERT, do not open attached ZIP file from Oracle-L member

From: Goulet, Dick <DGoulet_at_vicr.com>
Date: Fri, 9 Jul 2004 10:29:01 -0400
Message-ID: <4001DEAF7DF9BD498B58B45051FBEA650146C4CD@25exch1.vicorpower.vicr.com>

Mike,

        I've been a member of the list for a very long time. Over the years = we've had, I believe, two individuals who joined just for the purpose of = harvesting addresses. I know mine was. Now they seem to have taken to = spoofing me to get their trash out.

Dick Goulet
Senior Oracle DBA
Oracle Certified 8i DBA

-----Original Message-----
From: Michael Thomas [mailto:mhthomas_at_yahoo.com] Sent: Friday, July 09, 2004 10:20 AM
To: oracle-l_at_freelists.org
Subject: RE: VIRUS ALERT, do not open attached ZIP file from Oracle-L member

Hi,

If I remember, it was long ago since I've seen it done, the spoofer might need access to the mail server host. Given access to the mail server host its trivial.

So, you might suggest to your SA that their mail server host access is compromised. And, worse than that it might be compromised by someone launching MS viruses (which might not alert on xNIX antivirus, if any).

The McAfee message log from the email says:

08/07/2004	9:37 PM	Deleted	W2KSERV123\Administrator
J:\temp\Cache\FC3999B4d01	W32/Bagle.gen!pwdzip
08/07/2004	9:37 PM	Deleted	W2KSERV123\Administrator

C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\olriiivt W32/Bagle.gen!pwdzip

HTH. Good luck catching up with them. :-)

Regards,

Mike=20

• "Goulet, Dick" <DGoulet_at_vicr.com> wrote:
  > Mike,
  >=20
  > You can easily assume that the mail message was
  > spoofed. Our mail =3D
  

  ---

Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around=20 http://mail.yahoo.com=20

---

Please see the official ORACLE-L FAQ: http://www.orafaq.com

---

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request_at_freelists.org
put 'unsubscribe' in the subject line.
--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Received on Fri Jul 09 2004 - 09:25:49 CDT