[aclug-L] [Fwd: Re: Re: Hacking Linux Exposed]

["gLaNDix (Jesse Kaufman)" <glandix@xxxxxxxxxxxxxx>]

hmm, looks like someone on the list has been infected with the
"Badtrans" virus/worm (
http://vil.mcafee.com/dispVirus.asp?virus_k=99069&; )...  please, if you
are running windows, update your virus scan and scan your system...

if this helps in pin-pointing who is infected, here are the headers, and
at the bottom of this mail is the message i received:

thx,
gLaNDix

Return-Path: <quinton@xxxxxxxx>
Received: from mail.kih.net (apexmail.kih.net [209.209.190.216]) by
        lloydix.2y.net (8.11.6/8.11.3) with ESMTP id f8QGu4g40631 for
        <glandix@xxxxxxxxxxxxxx>; Wed, 26 Sep 2001 11:56:06 -0500 (CDT)
        (envelope-from quinton@xxxxxxxx)
Received: from doxbox (pm3-14-15.apex.net [209.250.42.222]) by
mail.kih.net
        (8.11.6/8.11.6) with SMTP id f8QGuIH07779 for
<glandix@xxxxxxxxxxxxxx>;
        Wed, 26 Sep 2001 12:56:18 -0400 (EDT)
Date: Wed, 26 Sep 2001 12:56:18 -0400 (EDT)
Message-ID: <000301c146ac$4ed0a3a0$641dfea9@doxbox>
From: "Charley" <quinton@xxxxxxxx>
To: "gLaNDix (Jesse Kaufman)" <glandix@xxxxxxxxxxxxxx>
Subject: Re: [aclug-L] Re: Hacking Linux Exposed  
MIME-Version: 1.0
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
X-SpamBouncer: 1.4 (8/24/01)
X-SBClass: OK
Content-Type: multipart/mixed; boundary="=-/hrorhcMCrgGHHh0S7tp"


Forwarded message: 
> 'gLaNDix' wrote:
> ====
> - 
> - On Wed, 26 Sep 2001, Nate Bargmann wrote:
> - 
> - > Well, there's always the argument that Linux technology moves so fast
> - > that the book will be essentially useless by Christmas and the 5th
> - > edition will be out!  Of course if she becomes a kernel hacker, she'll
> - > see through that argument...
> - 
> - hmm...  might have to try that one...  don't think she'll be doing much
> - more than e-mail, web-browsing or icq any time soon...  she can login and
> - get around X...that's  ...'
> 
> 
> > Take a look to the attachment. 
> 
> 

-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi