I have received several emails from lanius@gentoo.org which contain the W32.Beagle.X@mm virus as an attachement ( Counter_strike.cpl ). This has been happening for months. This is being sent to the gentoo-doc@lists.gentoo.org mailing list. Can lanius be contacted and asked to do a virus scan on his machine? The originating IP is 156.56.111.196 <lists.gentoo.org> but someone may be spoofing lanius' email directly. This doesn't affect me as I use only Linux based computers but some of the people on the mailing list may be using windows. The full headers are: X-Apparently-To: curtis119@yahoo.com via 206.190.37.162; Mon, 17 Jan 2005 15:35:22 -0800 X-YahooFilteredBulk: 156.56.111.196 Authentication-Results: mta108.mail.dcn.yahoo.com from=gentoo.org; domainkeys=neutral (no sig) X-Originating-IP: [156.56.111.196] Return-Path: <gentoo-doc-return-2060-curtis119=yahoo.com@lists.gentoo.org> Received: from 156.56.111.196 (EHLO parrot.gentoo.org) (156.56.111.196) by mta108.mail.dcn.yahoo.com with SMTP; Mon, 17 Jan 2005 15:35:22 -0800 Received: (qmail 22020 invoked by uid 89); 17 Jan 2005 23:35:20 +0000 Mailing-List: contact gentoo-doc-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: <mailto:gentoo-doc@gentoo.org> List-Help: <mailto:gentoo-doc-help@gentoo.org> List-Unsubscribe: <mailto:gentoo-doc-unsubscribe@gentoo.org> List-Subscribe: <mailto:gentoo-doc-subscribe@gentoo.org> List-Id: Gentoo Linux mail <gentoo-doc.gentoo.org> X-BeenThere: gentoo-doc@gentoo.org Delivered-To: mailing list gentoo-doc@lists.gentoo.org Received: (qmail 5491 invoked from network); 17 Jan 2005 23:35:20 +0000 Date: Tue, 18 Jan 2005 00:38:40 +0100 To: "Gentoo-doc" <gentoo-doc@lists.gentoo.org> From: "Lanius" <lanius@gentoo.org> Add to Address BookAdd to Address Book Message-ID: <fmbvcitnrfhwvofiryz@gentoo.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--------adlgsefotkkpvtuvnuxq" Subject: [gentoo-doc] Incoming message Content-Length: 20526
This is most definitely just a spoofed address. I get hundreds of these a week from various @gentoo.org addresses. He's not infected.