Bug#212090: SFK AntiVirus scan results

Thu Oct 2 12:11:01 2003

-----------------------
This e-mail is generated by the ss1.kyrnet.kg mail server to warn you that the e-mail
sent by unaryn@users.kyrnet.kg to 212025@bugs.debian.org, 211311@bugs.debian.org, ds@schleef.org, tuukka.hastrup@iki.fi, bam@debian.org, ramon.rey@hispalinux.es, nick@nickwillson.com, 210331@bugs.debian.org, 212039@bugs.debian.org, 212042@bugs.debian.org, 212041@bugs.debian.org, 212043@bugs.debian.org, 161596@bugs.debian.org, 175658@bugs.debian.org, 212053@bugs.debian.org, 212060@bugs.debian.org, 212054@bugs.debian.org, 212057@bugs.debian.org, 212061@bugs.debian.org, 212055@bugs.debian.org, 212056@bugs.debian.org, 212058@bugs.debian.org, 212059@bugs.debian.org, 212071@bugs.debian.org, 212067@bugs.debian.org, 212068@bugs.debian.org, 212070@bugs.debian.org, 198285@bugs.debian.org, 212069@bugs.debian.org, 212072@bugs.debian.org, kmr@debian.org, 212078@bugs.debian.org, 212084@bugs.debian.org, 212082@bugs.debian.org, 212083@bugs.debian.org, 212085@bugs.debian.org, 212090@bugs.debian.org, 212092@bugs.debian.org, eric@debian.org, rlb@defaultvalue.org, 212098@bugs.debian.org, 212099@bugs.debian.org, 212102@bugs.debian.org, 212106@bugs.debian.org, 212104@bugs.debian.org, 212109@bugs.debian.org, 212105@bugs.debian.org, 212111@bugs.debian.org, 212107@bugs.debian.org, 212103@bugs.debian.org, opal@debian.org, ean@brainfood.com, doko@cs.tu-berlin.de, helgehaf@aitel.hist.no, agmartin@aq.upm.es, javier@javierlinares.com, 175122@bugs.debian.org, 205327@bugs.debian.org, 212093@bugs.debian.org, tim@cap.american.edu, benj@debian.org, ahu@ds9a.nl, stalaker@codefactory.se, vincent@vinc17.org, d.borodaenko@sam-solutions.net is infected with virus: HTML/IFrame_Exploit*.

Please contact your system administrator for further information.

If you are the sender:
-------------------
The scanned e-mail has your address in the <From> header field. Either your
computer is infected or someone's computer having your e-mail address in
the address book has been infected.

(Please note that some viruses are sending e-mails directly from your computer.
Our advise is to check your computer using an up-to-date antivirus product).

If you are the receiver:
---------------------
Please contact the sender: very probably he/she doesn't know he/she has a computer virus.

Actions taken for the infected files:
-------------------------------------

The infected file was saved to quarantine with name: 1065085450-RAV24938.
The file (part0000:)->(IFRAME0000) attached to mail (with subject:Undelivered Message Returned To Mailer) sent by unaryn@users.kyrnet.kg to 212025@bugs.debian.org, 211311@bugs.debian.org, ds@schleef.org, tuukka.hastrup@iki.fi, bam@debian.org, ramon.rey@hispalinux.es, nick@nickwillson.com, 210331@bugs.debian.org, 212039@bugs.debian.org, 212042@bugs.debian.org, 212041@bugs.debian.org, 212043@bugs.debian.org, 161596@bugs.debian.org, 175658@bugs.debian.org, 212053@bugs.debian.org, 212060@bugs.debian.org, 212054@bugs.debian.org, 212057@bugs.debian.org, 212061@bugs.debian.org, 212055@bugs.debian.org, 212056@bugs.debian.org, 212058@bugs.debian.org, 212059@bugs.debian.org, 212071@bugs.debian.org, 212067@bugs.debian.org, 212068@bugs.debian.org, 212070@bugs.debian.org, 198285@bugs.debian.org, 212069@bugs.debian.org, 212072@bugs.debian.org, kmr@debian.org, 212078@bugs.debian.org, 212084@bugs.debian.org, 212082@bugs.debian.org, 212083@bugs.debian.org, 212085@bugs.debian.org, 212090@bugs.debian.org, 212092@bugs.debian.org, eric@debian.org, rlb@defaultvalue.org, 212098@bugs.debian.org, 212099@bugs.debian.org, 212102@bugs.debian.org, 212106@bugs.debian.org, 212104@bugs.debian.org, 212109@bugs.debian.org, 212105@bugs.debian.org, 212111@bugs.debian.org, 212107@bugs.debian.org, 212103@bugs.debian.org, opal@debian.org, ean@brainfood.com, doko@cs.tu-berlin.de, helgehaf@aitel.hist.no, agmartin@aq.upm.es, javier@javierlinares.com, 175122@bugs.debian.org, 205327@bugs.debian.org, 212093@bugs.debian.org, tim@cap.american.edu, benj@debian.org, ahu@ds9a.nl, stalaker@codefactory.se, vincent@vinc17.org, d.borodaenko@sam-solutions.net
is infected with virus: HTML/IFrame_Exploit*.
Cannot clean this file.
The file was successfully deleted by  SFK-AntiVirus.
The file (part0001:casbze.exe) attached to mail (with subject:Undelivered Message Returned To Mailer) sent by unaryn@users.kyrnet.kg to 212025@bugs.debian.org, 211311@bugs.debian.org, ds@schleef.org, tuukka.hastrup@iki.fi, bam@debian.org, ramon.rey@hispalinux.es, nick@nickwillson.com, 210331@bugs.debian.org, 212039@bugs.debian.org, 212042@bugs.debian.org, 212041@bugs.debian.org, 212043@bugs.debian.org, 161596@bugs.debian.org, 175658@bugs.debian.org, 212053@bugs.debian.org, 212060@bugs.debian.org, 212054@bugs.debian.org, 212057@bugs.debian.org, 212061@bugs.debian.org, 212055@bugs.debian.org, 212056@bugs.debian.org, 212058@bugs.debian.org, 212059@bugs.debian.org, 212071@bugs.debian.org, 212067@bugs.debian.org, 212068@bugs.debian.org, 212070@bugs.debian.org, 198285@bugs.debian.org, 212069@bugs.debian.org, 212072@bugs.debian.org, kmr@debian.org, 212078@bugs.debian.org, 212084@bugs.debian.org, 212082@bugs.debian.org, 212083@bugs.debian.org, 212085@bugs.debian.org, 212090@bugs.debian.org, 212092@bugs.debian.org, eric@debian.org, rlb@defaultvalue.org, 212098@bugs.debian.org, 212099@bugs.debian.org, 212102@bugs.debian.org, 212106@bugs.debian.org, 212104@bugs.debian.org, 212109@bugs.debian.org, 212105@bugs.debian.org, 212111@bugs.debian.org, 212107@bugs.debian.org, 212103@bugs.debian.org, opal@debian.org, ean@brainfood.com, doko@cs.tu-berlin.de, helgehaf@aitel.hist.no, agmartin@aq.upm.es, javier@javierlinares.com, 175122@bugs.debian.org, 205327@bugs.debian.org, 212093@bugs.debian.org, tim@cap.american.edu, benj@debian.org, ahu@ds9a.nl, stalaker@codefactory.se, vincent@vinc17.org, d.borodaenko@sam-solutions.net
contains suspicious code.
The file was copied to quarantine with name: bdb613dd.qto.
------------------------
this is a copy of the e-mail header:

Received: from 166.236.dialup.kyrnet.kg ([195.254.166.236] helo=kloenjzs)
	by ss1.kyrnet.kg with smtp (Exim 4.10)
	id 1A4zNA-0006U6-00; Thu, 02 Oct 2003 15:03:44 +0600

Scan engine 8.11 for sparc.
Last update: Tue, 19 Aug 2003 13:32:18 +06
Scanning for 81518 malwares (viruses, trojans and worms).

You can download a free 30-day fully functional trial version of RAV AntiVirus v8
from: http://www.ravantivirus.com