July 25, 2005

virus email alert

Got this in my inbox, I was sufficiently unfamiliar with my hosting to actually unzip the attachment. Thankfully I wasn't stupid enough to run the .pif included (not that I would do anything since I am using OS X).

From: administrator@atomicscript.com
Subject: Important Notification
Date: 25 July 2005 10:40:43 PM
To: freespace@atomicscript.com
Return-Path:
Envelope-To: freespace@atomicscript.com
Delivery-Date: Mon, 25 Jul 2005 22:41:20 +1000
Received: from ato7022 by remus.instanthosting.com.au with local-bsmtp (Exim 4.44) id 1Dx2Gk-0002jA-JB for freespace@atomicscript.com; Mon, 25 Jul 2005 22:41:20 +1000
Received: from [203.164.97.112] (helo=atomicscript.com) by remus.instanthosting.com.au with esmtp (Exim 4.44) id 1Dx2GH-0002dV-4g for freespace@atomicscript.com; Mon, 25 Jul 2005 22:41:18 +1000
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_0006_3A27F8D6.ADA0B3D5"
X-Priority: 3
X-Msmail-Priority: Normal
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on remus.instanthosting.com.au
X-Spam-Level: ***
X-Spam-Status: No, score=3.2 required=5.0 tests=FORGED_RCVD_HELO, MISSING_MIMEOLE,NO_REAL_NAME,PRIORITY_NO_NAME,RCVD_IN_NJABL_DUL, RCVD_IN_SORBS_DUL autolearn=no version=3.0.4
Message-Id:

We regret to inform you that your account has been suspended due to the violation of our site policy, more info is attached.
Attached is email-doc.zip, which includes the malicious .pif forementioned. Obviously if you get an email like this, delete it immediately.



Cheers,
Steve