Subject: E-Mail Message Contained a Virus
From: Postmaster@ucsd.edu
Date: Mon Jul 15 2002 - 16:02:10 EDT
This is a message from the UCSD E-Mail Virus Protection Service
----------------------------------------------------------------------
You are receiving this message because UCSD mechanically scans its
mail for embedded viruses, and an e-mail message addressed to you
was found to be infected. This does NOT mean that anything is
wrong with your computer.
The original e-mail attachment was titled
cal1.scr
and is believed to be infected by a virus or worm program.
Our virus scanner reported:
VIRUS W32/Klez-H Found in file ./g6FK1W9J094660/cal1.scr
That part of the mail has been removed from the message and
quarantined. The remainder of the message is attached below.
The ***INFECTED*** attachment will be held in quarantine for 30
days. After that time, it will be deleted and will no longer be
available. If you do not want a copy of the attachment, you need
do nothing further and it will be destroyed automatically.
The mail scanner program may (rarely) remove a valid portion of a
message which resembles a known virus. If you need to retrieve the
removed message part, you may download the quarantined file within
the next 40 days. Your mail client program may offer to do this
for you, as an external part of this message, or the file may be
retrieved via the URL below or by manual FTP. Your system administrator
may be able to help you with this.
Although we have taken steps to reduce the danger from the virus
embedded in it, the file may remain infectious. Before downloading
the file, please visit our web pages:
e-mail viruses:
http://www-no.ucsd.edu/virscan
how to restore a quarantined message part:
http://www-no.ucsd.edu/quarantine
If you do download the quarantined file, please use EXTREME CARE
in handling it.
ftp://mailbox1.ucsd.edu/quarantine/cb7f8edfc1bf2551a3c34f4691904aac.gz
Visit our web page at
http://www-no.ucsd.edu
for information about other UCSD ACS Network Operations services.
Please note that the To: and From: addresses in viral E-mail are often
false, forgeries, or have been chosen at random from lists of mailbox names.
It is not unusual for the author or site shown in the message to have
no knowledge or actual responsibility for the message you received.
-- Postmaster@UCSD.EDU
attached mail follows:
Content-Type: application/octet-stream; name=cal1.txt Content-Transfer-Encoding: base64 Content-ID: <C0o46R1obhBR>
PEhUTUw+DQo8IS0tICANCiAgQ29weXJpZ2h0IChjKSAxOTk5IFN1biBNaWNyb3N5c3RlbXMs IEluYy4gQWxsIFJpZ2h0cyBSZXNlcnZlZC4NCiANCiBUaGlzIHNvZnR3YXJlIGlzIHRoZSBj b25maWRlbnRpYWwgYW5kIHByb3ByaWV0YXJ5IGluZm9ybWF0aW9uIG9mIFN1bg0KIE1pY3Jv c3lzdGVtcywgSW5jLiAoIkNvbmZpZGVudGlhbCBJbmZvcm1hdGlvbiIpLiAgWW91IHNoYWxs IG5vdA0KIGRpc2Nsb3NlIHN1Y2ggQ29uZmlkZW50aWFsIEluZm9ybWF0aW9uIGFuZCBzaGFs bCB1c2UgaXQgb25seSBpbg0KIGFjY29yZGFuY2Ugd2l0aCB0aGUgdGVybXMgb2YgdGhlIGxp Y2Vuc2UgYWdyZWVtZW50IHlvdSBlbnRlcmVkIGludG8NCiB3aXRoIFN1bi4NCiANCiBTVU4g TUFLRVMgTk8gUkVQUkVTRU5UQVRJT05TIE9SIFdBUlJBTlRJRVMgQUJPVVQgVEhFIFNVSVRB QklMSVRZIE9GIFRIRQ0KIFNPRlRXQVJFLCBFSVRIRVIgRVhQUkVTUyBPUiBJTVBMSUVELCBJ TkNMVURJTkcgQlVUIE5PVCBMSU1JVEVEIFRPIFRIRQ0KIElNUExJRUQgV0FSUkFOVElFUyBP RiBNRVJDSEFOVEFCSUxJVFksIEZJVE5FU1MgRk9SIEEgUEFSVElDVUxBUg0KIFBVUlBPU0Us IE9SIE5PTi1JTkZSSU5HRU1FTlQuIFNVTiBTSEFMTCBOT1QgQkUgTElBQkxFIEZPUiBBTlkg REFNQUdFUw0KIFNVRkZFUkVEIEJZIExJQ0VOU0VFIEFTIEEgUkVTVUxUIE9GIFVTSU5HLCBN T0RJRllJTkcgT1IgRElTVFJJQlVUSU5HDQogVEhJUyBTT0ZUV0FSRSBPUiBJVFMgREVSSVZB VElWRVMuDQotLT4NCjxIRUFEPjxUSVRMRT4gDQoJQ2FsZW5kYXI6IEEgSlNQIEFQUExJQ0FU SU9ODQo8L1RJVExFPjwvSEVBRD4NCg0KDQo8Qk9EWSBCR0NPTE9SPSJ3aGl0ZSI+DQoNCjwl QCBwYWdlIGxhbmd1YWdlPSJqYXZhIiBpbXBvcnQ9ImNhbC4qIiAlPg0KPGpzcDp1c2VCZWFu IGlkPSJ0YWJsZSIgc2NvcGU9ImFwcGxpY2F0aW9uIiBjbGFzcz0iY2FsLlRhYmxlQmVhbiIg Lz4NCg0KPCUNCgl0YWJsZS5wcm9jZXNzUmVxdWVzdChyZXF1ZXN0KTsNCglpZiAodGFibGUu Z2V0UHJvY2Vzc0Vycm9yKCkgPT0gZmFsc2UpIHsNCiU+DQoNCjwhLS0gaHRtbCB0YWJsZSBn b2VzIGhlcmUgLS0+DQo8Q0VOVEVSPg0KPFRBQkxFIFdJRFRIPTYwJSBCR0NPTE9SPXllbGxv dyBDRUxMUEFERElORz0xNT4NCjxUUj4NCjxURCBBTElHTj1DRU5URVI+IDxBIEhSRUY9Y2Fs MS5qc3A/ZGF0ZT1wcmV2PiBwcmV2IDwvQT4NCjxURCBBTElHTj1DRU5URVI+IENhbGVuZGFy OjwlPSB0YWJsZS5nZXREYXRlKCkgJT48L1REPg0KPFREIEFMSUdOPUNFTlRFUj4gPEEgSFJF Rj1jYWwxLmpzcD9kYXRlPW5leHQ+IG5leHQgPC9BPg0KPC9UUj4NCjwvVEFCTEU+DQoNCjwh LS0gdGhlIG1haW4gdGFibGUgLS0+DQo8VEFCTEUgV0lEVEg9NjAlIEJHQ09MT1I9bGlnaHRi bHVlIEJPUkRFUj0xIENFTExQQURESU5HPTEwPg0KPFRSPg0KPFRIPiBUaW1lIDwvVEg+DQo8 VEg+IEFwcG9pbnRtZW50IDwvVEg+DQo8L1RSPg0KPEZPUk0gTUVUSE9EPVBPU1QgQUNUSU9O PWNhbDEuanNwPg0KPCUNCglmb3IoaW50IGk9MDsgaTx0YWJsZS5nZXRFbnRyaWVzKCkuZ2V0 Um93cygpOyBpKyspIHsNCgkgICBjYWwuRW50cnkgZW50ciA9IHRhYmxlLmdldEVudHJpZXMo KS5nZXRFbnRyeShpKTsJDQolPg0KCTxUUj4NCgk8VEQ+IA0KCTxBIEhSRUY9Y2FsMi5qc3A/ dGltZT0iPCU9IGVudHIuZ2V0SG91cigpICU+Ij4NCgkJPCU9IGVudHIuZ2V0SG91cigpICU+ IDwvQT4NCgk8L1REPg0KCTxURCBCR0NPTE9SPTwlPSBlbnRyLmdldENvbG9yKCkgJT4+DQoJ PCU9IGVudHIuZ2V0RGVzY3JpcHRpb24oKSAlPg0KCTwvVEQ+IA0KCTwvVFI+DQo8JQ0KCX0N CiU+DQo8L0ZPUk0+DQo8L1RBQkxFPg0KPEJSPg0KDQo8IS0tIGZvb3RlciAtLT4NCjxUQUJM RSBXSURUSD02MCUgQkdDT0xPUj15ZWxsb3cgQ0VMTFBBRERJTkc9MTU+DQo8VFI+DQo8VEQg QUxJR049Q0VOVEVSPiAgPCU9IHRhYmxlLmdldE5hbWUoKSAlPiA6IA0KCQkgICAgIDwlPSB0 YWJsZS5nZXRFbWFpbCgpICU+IDwvVEQ+DQo8L1RSPg0KPC9UQUJMRT4NCjwvQ0VOVEVSPg0K DQo8JQ0KCX0gZWxzZSB7DQolPg0KPGZvbnQgc2l6ZT01Pg0KCVlvdSBtdXN0IGVudGVyIHlv dXIgbmFtZSBhbmQgZW1haWwgYWRkcmVzcyBjb3JyZWN0bHkuDQo8L2ZvbnQ+DQo8JQ0KCX0N CiU+DQoNCg0KPC9CT0RZPg0KPC9IVE1MPg0KDQoNCg0KDQ=9
This archive was generated by hypermail 2b28 : Mon Jul 15 2002 - 16:06:51 EDT