[51015] in North American Network Operators' Group
Anyone from Prodigy or L3 listening? (W32/Yaha Complaint)
daemon@ATHENA.MIT.EDU (Richard Forno)
Sun Aug 18 16:25:49 2002
Date: Sun, 18 Aug 2002 16:25:16 -0400
From: Richard Forno <rforno@infowarrior.org>
To: <nanog@merit.edu>
In-Reply-To: <3d60c165.647791@news.alt.net>
Errors-To: owner-nanog-outgoing@merit.edu
Apologies for posting this to NANOG, but I am in a mood, and it's difficult
to reach anyone at Prodigy.
For the past several weeks, every other day, I've received 10 messages sent
through Prodigy's mail servers, all of which appear to be a Win32/Yaha
message. (http://www.ravantivirus.com/virus/showvirus.php?v=101)
Today I got 10 more messages, dated 18 August 2002, which is the same date
appearing on dozens of other messages over the past few weeks.
I'm posting this to NANOG in the hopes that someone on the list who works
for Prodigy and/or L3 (the dialup provider) can ruffle some feathers on this
for corrective action.
The header of the message appears below - note that in other cases, I've
received messages from "this person" from pimoutX-ext.prodigy.net, where X
is the number (1-5) of their mail server.
And, yes, as of today, I've added this latest crap to my filters. :)
Thanks in advance, and again, sorry for the Sunday afternoon complaint.
Cheers
rick
Return-Path: <jfay291@prodigy.net>
Received: (from daemon@localhost)
by web1.nidhog.com (8.12.5/8.11.3) id g7IJdt5l046337
for rforno@infowarrior.org.CLEAN; Sun, 18 Aug 2002 15:39:55 -0400 (EDT)
(envelope-from jfay291@prodigy.net)
Received: from pimout5-ext.prodigy.net (pimout5-ext.prodigy.net
[207.115.63.98])
by web1.nidhog.com (8.12.5/8.11.3) with ESMTP id g7IJdsuQ046332
for <rforno@infowarrior.org>; Sun, 18 Aug 2002 15:39:54 -0400 (EDT)
(envelope-from jfay291@prodigy.net)
Received: from smtp.prodigy.net
(dialup-65.58.64.224.Dial1.Indianapolis1.Level3.net [65.58.64.224])
by pimout5-ext.prodigy.net (8.11.0/8.11.0) with SMTP id g7IJdcf286002
for <rforno@infowarrior.org>; Sun, 18 Aug 2002 15:39:38 -0400
Message-Id: <200208181939.g7IJdcf286002@pimout5-ext.prodigy.net>
From: JANE FAY<jfay291@prodigy.net>
To: rforno@infowarrior.org
Subject: Fw: Enjoy Romantic life !
Date: Sun,18 Aug 2002 14:37:29 PM
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=voeuogm
