[sane-devel] Virus warning: Abuse of sane-devel email addresses

Oliver Schwartz Oliver.Schwartz at gmx.de
Wed Jul 23 18:15:51 BST 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

in the last two days I received two emails with faked addresses that 
claimed to be sent via sane-devel (but in fact were not). Both emails 
contained a .pif file which, I assume, contains a virus. DO NOT OPEN 
THIS FILE.

The sender names were taken from SANE-Devel (Martin Kho, Henning 
Meyer-Geinitz). The email address of the sender, however, was faked 
(see attached mail below). To make the mail look more authentic it 
also gives a small quote from an previous email to sane-devel.

I don't think such mails can be prevented, but, as always, you should 
take extra care when opening attachements, even from people you 
recognize from the mailing list.

- -Oliver

- -------------forwarded mail ------------------------------------------


Return-Path: <henning at microsoft.com>
Received: (qmail 31579 invoked by alias); 23 Jul 2003 14:56:00 -0000
Delivered-To: GMX delivery to oliver.schwartz at gmx.de
Received: (qmail 31513 invoked by uid 65534); 23 Jul 2003 14:55:59 
- -0000
Received: from vsmtp1.tin.it (EHLO vsmtp1.tin.it) (212.216.176.221)
  by mx0.gmx.net (mx005-rz3) with SMTP; 23 Jul 2003 16:55:59 +0200
Received: from server--amd (62.211.178.22) by vsmtp1.tin.it (7.0.019)
        id 3F17CBF9001C28AE; Wed, 23 Jul 2003 16:54:29 +0200
Date: Wed, 23 Jul 2003 16:54:29 +0200 (added by 
postmaster at virgilio.it)
Message-ID: <3F17CBF9001C28AE at vsmtp1.tin.it> (added by 
postmaster at virgilio.it)
From: Henning Meier-Geinitz <henning at microsoft.com>
Subject: Re: [sane-devel] Problem in setting up Xsane
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----------VF3U8XRG18M7N2"
To: Oliver.Schwartz at gmx.de
X-GMX-Antispam: 0 (Mail was not recognized as spam)
X-Resent-By: Forwarder <forwarder at gmx.de>
X-Resent-For: oliver.schwartz at gmx.de
X-Resent-To: oliver.schwartz at swissonline.ch, Oliver.Schwartz at gmx.net
X-Spam-Status: No, hits=-6.4 required=5.0
        tests=EMAIL_ATTRIBUTION,MICROSOFT_EXECUTABLE
        autolearn=ham version=2.53
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp)
Status: R 
X-Status: N
X-KMail-EncryptionState:  
X-KMail-SignatureState:  


Hi,

On Thu, Feb 27, 2003 at 05:07:30PM +0800, Stephen Liu wrote:
> Henning Meier-Geinitz wrote:
> >You have the same card as mentioned in this article?
> 
>

Attached: BuonNatale.zip.pif
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE/HsLH/V6sbrmfIuMRAnOwAJ4w/aVaJmAFwdn4qaUHZmLaZ/UcmwCfXCN2
vDjYQxYiwj/XVBbaA/jYVQI=
=Pf3j
-----END PGP SIGNATURE-----




More information about the sane-devel mailing list