[CLUE-Tech] OT Funky E-Mail Messages

Fri Oct 18 16:01:10 MDT 2002

On Friday 18 October 2002 03:35 pm, Paul Bille wrote:
> I've been receiving e-mail messages lately with the following:
>
> <HTML><HEAD></HEAD><BODY>
> <iframe src=cid:J5X496Ef2Vs0 height=0 width=0>
> </iframe>
> <FONT></FONT></BODY></HTML>
>
> There appears to be no body to the message.  I'm unfamiliar with the
> cid: protocol but I'm guessing the source should be included as an
> attachment.  There is no attachment.  Further there is no file on my
> system with the name j5x4 . . .
>
> This particular message came from webmaster at 50states.com yesterday
> however I just got another today from smiley5646 at aol.com.
>
> Is this something going around?  Is it something malicious that is being
> stripped for my protection?
>
> Am I missing something?  Is there some application I should be running
> to enable a new cid: protocol?
>
> Thanks,
>
> Paul

It's a virus.  I'm pretty sure it's the klez virus.  I've gotten a few copies 
with exactly that signature, but my copies contained (windows) executable 
attachments.

chances are that cudenver is detecting and deleting it without comment, or 
maybe they delete all attachments without comment.  In any event, there isnt 
much to worry about on a linux system, I would think.

-- 
Charles Oriez   coriez at oriez.org
39  34' 34.4"N / 105 00' 06.3"W 
**
"Outside of a dog, a book is a man's best friend.  Inside of a dog, it's too 
dark to read".
   -- Marx