[vchkpw] Weird messages coming from telepac.pt user

[Tom Collins]

A few messages have come through to list subscribers recently that 
didn't have proper headers.  One of them claimed to be from Chad 
Morland, but using the address [EMAIL PROTECTED] (which is an 
invalid address).

It looks like the machine at adsl-b3-72-36.telepac.pt (213.13.72.36) is 
infected with an email virus/worm that is reposting messages to 
subscribers of the list directly.  Some of them are just simple 
re-posts (like the "Queue not delivered" message from Julio Espada 
Olivares that was originally sent May 12, 2003).  But the resend from 
Chad Morland included a virus attachment.

Keep an eye out for the messages, they'll include a received header 
like the following, and won't have proper mail list headers.

Received: from NetClube05 ([213.13.72.36]) by fep01-svc.mail.telepac.pt
          (InterMail vM.5.01.04.13 201-253-122-122-113-20020313) with 
SMTP
          id 
<[EMAIL PROTECTED]>;
          Sun, 29 Jun 2003 19:26:57 +0100

And, if you're the subscriber to [EMAIL PROTECTED] that happens to have 
213.13.72.36 as your IP address -- scan your system with an up-to-date 
virus checker!

--
Tom Collins
[EMAIL PROTECTED]