[sane-devel] Virus warning: Abuse of sane-devel email addresses

Oliver Schwartz Oliver.Schwartz@gmx.de
Wed, 23 Jul 2003 19:15:51 +0200


=2D----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

in the last two days I received two emails with faked addresses that=20
claimed to be sent via sane-devel (but in fact were not). Both emails=20
contained a .pif file which, I assume, contains a virus. DO NOT OPEN=20
THIS FILE.

The sender names were taken from SANE-Devel (Martin Kho, Henning=20
Meyer-Geinitz). The email address of the sender, however, was faked=20
(see attached mail below). To make the mail look more authentic it=20
also gives a small quote from an previous email to sane-devel.

I don't think such mails can be prevented, but, as always, you should=20
take extra care when opening attachements, even from people you=20
recognize from the mailing list.

=2D -Oliver

=2D -------------forwarded mail ------------------------------------------


Return-Path: <henning@microsoft.com>
Received: (qmail 31579 invoked by alias); 23 Jul 2003 14:56:00 -0000
Delivered-To: GMX delivery to oliver.schwartz@gmx.de
Received: (qmail 31513 invoked by uid 65534); 23 Jul 2003 14:55:59=20
=2D -0000
Received: from vsmtp1.tin.it (EHLO vsmtp1.tin.it) (212.216.176.221)
  by mx0.gmx.net (mx005-rz3) with SMTP; 23 Jul 2003 16:55:59 +0200
Received: from server--amd (62.211.178.22) by vsmtp1.tin.it (7.0.019)
        id 3F17CBF9001C28AE; Wed, 23 Jul 2003 16:54:29 +0200
Date: Wed, 23 Jul 2003 16:54:29 +0200 (added by=20
postmaster@virgilio.it)
Message-ID: <3F17CBF9001C28AE@vsmtp1.tin.it> (added by=20
postmaster@virgilio.it)
=46rom: Henning Meier-Geinitz <henning@microsoft.com>
Subject: Re: [sane-devel] Problem in setting up Xsane
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary=3D"----------VF3U8XRG18M7N2"
To: Oliver.Schwartz@gmx.de
X-GMX-Antispam: 0 (Mail was not recognized as spam)
X-Resent-By: Forwarder <forwarder@gmx.de>
X-Resent-For: oliver.schwartz@gmx.de
X-Resent-To: oliver.schwartz@swissonline.ch, Oliver.Schwartz@gmx.net
X-Spam-Status: No, hits=3D-6.4 required=3D5.0
        tests=3DEMAIL_ATTRIBUTION,MICROSOFT_EXECUTABLE
        autolearn=3Dham version=3D2.53
X-Spam-Level:=20
X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp)
Status: R=20
X-Status: N
X-KMail-EncryptionState: =20
X-KMail-SignatureState: =20


Hi,

On Thu, Feb 27, 2003 at 05:07:30PM +0800, Stephen Liu wrote:
> Henning Meier-Geinitz wrote:
> >You have the same card as mentioned in this article?
>=20
>

Attached: BuonNatale.zip.pif
=2D----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE/HsLH/V6sbrmfIuMRAnOwAJ4w/aVaJmAFwdn4qaUHZmLaZ/UcmwCfXCN2
vDjYQxYiwj/XVBbaA/jYVQI=3D
=3DPf3j
=2D----END PGP SIGNATURE-----