Virus

Top Page

Reply to this message
Author: Stéphane MARTIN
Date:  
To: GUILDE
Subject: Virus
Salut,

Je reçois plein de "Delivery Status Notification" en sujet, de "Mail Delivery Status". Des envois que je n'ai pas fait et qui n'aboutissent pas visiblement.

Exemple dans le corps :

Message/Delivery-Status (287 bytes)]
Reporting-MTA: dns; mel-rto3.wanadoo.fr
Received-from-MTA: dns; mel-rta10.wanadoo.fr (193.252.19.193)
Arrival-Date: Thu, 5 Dec 2002 09:26:37 +0100

Final-Recipient: rfc822; hakima@???
Action: Failed
Status: 5.4.3 (routing server failure)


[Text/RFC822-headers (753 bytes)]
Return-Path: <stephane-Martin@???>
Received: from mel-rta10.wanadoo.fr (193.252.19.193) by mel-rto3.wanadoo.fr (6.5.007)
        id 3DDA12BC00A727DD for hakima@???; Thu, 5 Dec 2002 09:26:37 +0100
Received: from Xytr (193.251.94.167) by mel-rta10.wanadoo.fr (6.7.010)
        id 3DEE017F0007704A for hakima@???; Thu, 5 Dec 2002 09:26:37 +0100
Date: Thu, 5 Dec 2002 09:26:37 +0100 (added by postmaster@???)
Message-ID: <3DEE017F0007704A@???> (added by postmaster@???)
From: stephane-Martin <stephane-Martin@???>
To: hakima@???
Subject: A  WinXP patch
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary=Sg44y5UFH0IffI23A8325X535CpD5



Ce qui m'inquiète c'est que hakima@??? c'est un compte local sur ma machine qui comporte un serveur Postfix.
Je ne vois pas trop comment cette adresse aurait pu se retrouver dans le carnet d'adresse d'un windosien infecté.

D'autre part, j'ai reçu aussi ça :


                           V I R U S  A L E R T


Our viruschecker found the

    'W32/Klez-H'
    'W32/Klez-H'


virus(es) in your email to the following recipient(s):

-> echo@???

Please check your system for viruses, or ask your system administrator
to do so.

For your reference, here are the headers from your email:

------------------------- BEGIN HEADERS -----------------------------
Received: from mel-rto6.wanadoo.fr (smtp-out-6.wanadoo.fr [193.252.19.25])
    by bougainville.cnam.fr (Postfix) with ESMTP id 8E5722EFD2
    for <echo@???>; Thu,  5 Dec 2002 09:27:43 +0100 (CET)
Received: from mel-rta10.wanadoo.fr (193.252.19.193) by mel-rto6.wanadoo.fr (6.5.007)
        id 3DDA145A00A6E034 for echo@???; Thu, 5 Dec 2002 09:27:43 +0100
Received: from Bfnqdr (193.251.94.167) by mel-rta10.wanadoo.fr (6.7.010)
        id 3DEE017F00077307 for echo@???; Thu, 5 Dec 2002 09:27:43 +0100
Date: Thu, 5 Dec 2002 09:27:43 +0100 (added by postmaster@???)
Message-ID: <3DEE017F00077307@???> (added by postmaster@???)
From: vrnqehaa <vrnqehaa@???>
To: echo@???
Subject: A special  powful tool
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary=BR186E061R1365z1oM52qoMS04
-------------------------- END HEADERS ------------------------------



Est-il possible que ma machine linux soit infectée ?
Klez pour Linux ?


-- 
       @+
Stéphane Martin
Tél : 06 94 26 57 01
Fax : 05 94 31 54 45