[simpits-tech] Laugh, it's funny! (Pt. II)

[Gene Buckle]

On Fri, 13 Jun 2003, Erwin Neyt wrote:

> No it's NOT funny. The hvv.nl domain is my company's domain. There is a
> three level virus protection installed and the virus was intercepted:
>
> 06/13/2003 01:54:40 Original attachment (photo.exe) was Deleted.  A virus
> was detected and removed from the original attachment.  You can safely save
> or delete this replacement attachment.
>
> It beats me how this could be send (assuming it was send from our mail
> system). The only thing which I did is install Eudora on my workstation
> (?), which didn't run at the time the virus was send.
>
> Any one got a SMTP header for me? Please send it to erwin.neyt at verbrugge.nl
>
> will investigate....
>

It looks like the idiot is from Singapore.  The virus tried to send a copy
to the -tech list and my traps caught it.  Here's the header:

Received: from northgate.starhub.net.sg (northgate.starhub.net.sg
[203.117.1.53])
	by uridium.deltasoft.com (8.9.3/8.9.3) with ESMTP id QAA26462;
	Thu, 12 Jun 2003 16:58:11 -0700
Received: from funhousar (cm84.gamma45.maxonline.com.sg [202.156.45.84])
	by northgate.starhub.net.sg (8.12.5/8.12.5) with SMTP id
h5CNic3U012018;
	Fri, 13 Jun 2003 07:44:38 +0800 (SST)
Date: Fri, 13 Jun 2003 07:44:38 +0800 (SST)
Message-Id: <200306122344.h5CNic3U012018@northgate.starhub.net.sg>
From: Gene Buckle <geneb@hvv.nl>
Subject:  Re: [simpits-tech] Laugh, it's funny! (Pt. II)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------04C8NHH9EC9DW2"