I got a bounced email with an attachment entitled macex.mex.scr, about 72.3
KB, which if IIRC is probably the Sobig.F virus.  It appears to have been
sent to people on this list (even though the list wasn't in the "to:" line)
because the body of the email discussed MySQL.

Since Sobig.F forges the "from" line, I don't think the person it was "from"
sent it.

Rather, IIRC the virus doesn't spoof the IP address that the incoming
connection came from, and it appears to be:
217.204.219.154
nslookup says this belongs to
mobiletones1-2.dsl.easynet.co.uk

That belong to anybody here?  If so, and *if* I'm right about the virus
(well, worm actually), you might be infected...

sjfromm


-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]

Reply via email to