John, There was no other message with the delivery report, just what I posted, which is a little annoying. And no attachment or information on the attachment, by the looks of it whatever automated system rejects the messages does so just because its an .exe file, not necessarily because there is a virus.
I have to say I'm 99% sure its from this list, as I'm not on any other lists, and only ever sign up to stuff with a fake hotmail account. And I don't think someone within the company who sent the delivery report has my address as they are a US based company, we're UK, and we don't deal with anyone US based. Also I've been contacted by a few people since posting the original topic that have agreed they think its the list, as they have received similar emails before. Incidentally, since posting that message to the list the emails have stopped, I was receiving about 2 a day, so hopefully someone took notice and cleaned their system. Ben ========================================================== Triumph International Ltd Arkwright Road, Groundwell, Swindon, SN25 5BE Ben Blackmore I.T. Department Phone: +44 (0) 1793 720126 Fax: +44 (0) 1793 720179 Mail: [EMAIL PROTECTED] Visit us at: http://www.triumph-international.co.uk ========================================================== This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited. ========================================================== |---------+---------------------------> | | John Kaufmann | | | <[EMAIL PROTECTED]| | | > | | | Sent by: | | | [EMAIL PROTECTED]| | | ealvnc.com | | | | | | | | | 17/11/2004 18:01| | | | |---------+---------------------------> >---------------------------------------------------------------------------------------------------------------| | | | To: [EMAIL PROTECTED], [EMAIL PROTECTED] | | cc: | | Subject: Re: Virus? | >---------------------------------------------------------------------------------------------------------------| At 14:39 +0000 041117, [EMAIL PROTECTED] wrote: >I think someone on this list might have a virus. I keep getting >non-delivery reports (see below) ... >========================================================== >----- Forwarded by Ben Blackmore/GB/TISUB on 17/11/2004 14:29 ----- >|---------+---------------------------> >| | [EMAIL PROTECTED]| >| | edgroup.com | >| | | >| | 17/11/2004 14:19| >| | | >|---------+---------------------------> > >----------------------------------------------------------| > | | > | To: [EMAIL PROTECTED]| > | cc: [EMAIL PROTECTED] | > | Subject: TFS Non-Delivery Report: Re: Thank you! | > >----------------------------------------------------------| > >###### Created by TFS ########################## >When [EMAIL PROTECTED] sent e-mail to >[EMAIL PROTECTED] (1/1/2) >Explanation: This message contains an executable attachment and will not be >delivered. > >RULE: Executables >################################################# True, the culprit is not you, but it's not likely to be someone in FederatedGroup, either. True, someone is spoofing your address, but it's not clear (and probably not likely) that your address was harvested from this list. In the non-delivery report, didn't they send you the original, with full headers and body? Was the executable inline 7-bit encoded (probably base64) or a binary attachment? What was the virus/worm? -- John _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list