[Meteor-Scatter] VIRUS ALERT!!!

cris [email protected]
Fri, 29 Aug 2003 11:26:57 +0300


Hello,

Here is YO3FFF <Cristi>. Please forward this message to all your
friends!!!

In the past week the received e-mails infected with virus
Win32/Sobig.F@mm increase very much. A lot of theme come from hamradio.
So, this virus is not very harmful but create a lot of traffic in the
network and a security hole in your computer! For more details please
check this link of look on the internet searching for Win32/Sobig.F@mm:

		http://www.ravantivirus.com/virus/showvirus.php?v=198

Please check your computers with a updated antivirus program or check
the above link to find out how to eliminate the virus! Is so simple and
cost you only few minutes(depend of your knowledge)!

All the best and hope to receive a lot of e-mails from you but not
infected with viruses!!!

73 de YO3FFF
Cristi

PS. Today 28.08.2003 I receive 61 e-mails infected from 100!!!)
For your information below is the antivirus alert and a list with the
hamradio who are infected.

in3vvf, k2hto, zs5wo, f1tay, ua3lqw, vk2awd, vk3rmh, sm3cer, g3red,
ve3ajm, ik2rfc, gi0otc, rw3dk, gm7wft, es7agn, n8tut and more.

-----------------------
This e-mail is generated by the mc.rnc.ro mail server to warn you that
the e-mail
sent by [email protected] to <[email protected]> is infected with
virus: Win32/Sobig.F@mm.

Please contact your system administrator for further information.

If you are the sender:
-------------------
The scanned e-mail has your address in the <From> header field. Either
your
computer is infected or someone's computer having your e-mail address
in
the address book has been infected.

(Please note that some viruses are sending e-mails directly from your
computer.
Our advise is to check your computer using an up-to-date antivirus
product).

If you are the receiver:
---------------------
Please contact the sender: very probably he/she doesn't know he/she has
a computer virus.

Actions taken for the infected files:
-------------------------------------


The infected file was saved to quarantine with name:
1062029375-RAV19665.
The file (part0002:thank_you.pif) attached to mail (with subject:Re:
Re: My details) sent by [email protected] to <[email protected]>
is infected with virus: Win32/Sobig.F@mm.
Cannot clean this file.
The file was successfully deleted by RAV AntiVirus.
------------------------
this is a copy of the e-mail header:

Received: from sunu.rnc.ro (193.230.31.220)
  by mc.rnc.ro with SMTP; 28 Aug 2003 00:09:35 -0000
Received: (qmail 17340 invoked from network); 27 Aug 2003 23:54:15
-0000
Received: from birdcage.ethz.ch (HELO BIRDCAGE) (129.132.21.111)
  by sunu.rnc.ro with SMTP; 27 Aug 2003 23:54:15 -0000


RAV AntiVirus for Linux i386 version: 8.4.1 (snapshot-20021107)
Copyright (c) since 1995 GeCAD The Software Company. All rights
reserved.
Registered version for 3 domain(s).
Running on host: mc.rnc.ro

Scan engine 8.11 for i386.
Last update: Wed, 27 Aug 2003 15:22:09 +03
Scanning for 81671 malwares (viruses, trojans and worms).