Virus/Spam

I have received this email from Patrick Hopper [patrickhopper@qnx.com]. It
contained a Virus!!! Subject was CompactPCI June E-letter

========
COMPACTPCI E-letter
Volume 2, Issue 6 June, 2000

Welcome to the CompactPCI E-letter, the only monthly
CompactPCI technology update available. Check out the current
editorial and the most exciting new products available!

*** To view the June CompactPCI E-letter, click below ***
http://www.compactpci-systems.com/eletter.html

**Net Seminar: RadiSys Corporation and Trillium Digital Systems
present

\

The header is

Return-Path: <patrickhopper@qnx.com>
Received: from newgw.elsite.ru (IDENT:postfix@[195.68.175.30])
by toronto.qenesis.com (8.9.3/8.8.7) with ESMTP id EAA30317
for <mcharest@zinformatic.com>; Thu, 31 Oct 2002 04:14:08 -0500
Received: from boss (unknown [195.68.175.80])
by newgw.elsite.ru (Postfix) with SMTP
id ACC8914BC; Thu, 31 Oct 2002 12:15:51 +0300 (MSK)
From: Patrick Hopper <patrickhopper@qnx.com>
Subject: CompactPCI June E-letter
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----------2CJG6E9BAWD1CPE"
Message-Id: <20021031091551.ACC8914BC@newgw.elsite.ru>
Date: Thu, 31 Oct 2002 12:15:51 +0300 (MSK)
To: undisclosed-recipients:;
Status:

Mario Charest wrote:

By the way, this is NOT QSS fault, somebody is impersonnating a QSS staffer.

What tipped you off ? Was it the Russian domain :wink:

By the way, this is NOT QSS fault, somebody is impersonnating a QSS staffer.

“Mario Charest” postmaster@127.0.0.1 wrote in message
news:aprdis$abp$1@inn.qnx.com

I have received this email from Patrick Hopper [> patrickhopper@qnx.com> ].
It
contained a Virus!!! Subject was CompactPCI June E-letter

========
COMPACTPCI E-letter
Volume 2, Issue 6 June, 2000

Welcome to the CompactPCI E-letter, the only monthly
CompactPCI technology update available. Check out the current
editorial and the most exciting new products available!

*** To view the June CompactPCI E-letter, click below ***
http://www.compactpci-systems.com/eletter.html

**Net Seminar: RadiSys Corporation and Trillium Digital Systems
present

\

The header is

Return-Path: <> patrickhopper@qnx.com
Received: from newgw.elsite.ru (IDENT:postfix@[195.68.175.30])
by toronto.qenesis.com (8.9.3/8.8.7) with ESMTP id EAA30317
for <> mcharest@zinformatic.com> >; Thu, 31 Oct 2002 04:14:08 -0500
Received: from boss (unknown [195.68.175.80])
by newgw.elsite.ru (Postfix) with SMTP
id ACC8914BC; Thu, 31 Oct 2002 12:15:51 +0300 (MSK)
From: Patrick Hopper <> patrickhopper@qnx.com
Subject: CompactPCI June E-letter
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----------2CJG6E9BAWD1CPE"
Message-Id: <> 20021031091551.ACC8914BC@newgw.elsite.ru
Date: Thu, 31 Oct 2002 12:15:51 +0300 (MSK)
To: undisclosed-recipients:;
Status:

“Rennie Allen” <rallen@csical.com> wrote in message
news:3DC0E894.40803@csical.com

Mario Charest wrote:
By the way, this is NOT QSS fault, somebody is impersonnating a QSS
staffer.

What tipped you off ? Was it the Russian domain > :wink:

Anti-virus found the virus. The russian domain would have certainly make
me suspicious.

Mario Charest postmaster@127.0.0.1 wrote:


I have received this email from Patrick Hopper [> patrickhopper@qnx.com> ]. It
contained a Virus!!! Subject was CompactPCI June E-letter

There is no Patrick Hopper and QSSL. That would be a forged
From: line. Among other things, mail from QSSL isn’t going to
be routed through Russia to get to you.

-David

========
COMPACTPCI E-letter
Volume 2, Issue 6 June, 2000

Welcome to the CompactPCI E-letter, the only monthly
CompactPCI technology update available. Check out the current
editorial and the most exciting new products available!

*** To view the June CompactPCI E-letter, click below ***
http://www.compactpci-systems.com/eletter.html

**Net Seminar: RadiSys Corporation and Trillium Digital Systems
present


The header is

Return-Path: <> patrickhopper@qnx.com
Received: from newgw.elsite.ru (IDENT:postfix@[195.68.175.30])
by toronto.qenesis.com (8.9.3/8.8.7) with ESMTP id EAA30317
for <> mcharest@zinformatic.com> >; Thu, 31 Oct 2002 04:14:08 -0500
Received: from boss (unknown [195.68.175.80])
by newgw.elsite.ru (Postfix) with SMTP
id ACC8914BC; Thu, 31 Oct 2002 12:15:51 +0300 (MSK)
From: Patrick Hopper <> patrickhopper@qnx.com
Subject: CompactPCI June E-letter
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----------2CJG6E9BAWD1CPE"
Message-Id: <> 20021031091551.ACC8914BC@newgw.elsite.ru
Date: Thu, 31 Oct 2002 12:15:51 +0300 (MSK)
To: undisclosed-recipients:;
Status:


QNX Training Services
http://www.qnx.com/support/training/
Please followup in this newsgroup if you have further questions.

Mario,

there was used an original info-mail from Partick which was modified.

That happens also with postings of the A-List (Ken Crater List) and
other mailing lists. I got at least 6 of such SPAMs with virus in this
month, the same which you got, too.

Here an original header from Parick Hopper:

Return-path: <phopper@opensystems-publishing.com>
Received: from [206.141.239.206] (helo=mailhost.det.ameritech.net)
[…]
Received: from patrick ([199.179.188.64]) by mailhost.det.ameritech.net
(InterMail v4.01.01.07 201-229-111-110) with SMTP
id
20010911153459.SHWX15272.mailhost.det.ameritech.net@patrick
[…]
Message-ID: 01e901c13ad6$86689de0$0b0a0a0a@patrick
Reply-To: “Patrick Hopper” <phopper@opensystems-publishing.com>
From: “Patrick Hopper” <phopper@opensystems-publishing.com>
Organization: OpenSystems Publishing.com


Patrick Hopper
VP Sales/Marketing
OpenSystems Publishing
810-415-6500
810-415-4882
Publishers of: CompactPCI Systems, VMEbus Systems, PC/104 Embedded
Solutions,
DSP Engineering, Applied Computing and DSP Engineering



Mario Charest wrote:

I have received this email from Patrick Hopper [> patrickhopper@qnx.com> ]. It
contained a Virus!!! Subject was CompactPCI June E-letter

[clip]

The header is

Return-Path: <> patrickhopper@qnx.com
Received: from newgw.elsite.ru (IDENT:postfix@[195.68.175.30])
by toronto.qenesis.com (8.9.3/8.8.7) with ESMTP id EAA30317
for <> mcharest@zinformatic.com> >; Thu, 31 Oct 2002 04:14:08 -0500
Received: from boss (unknown [195.68.175.80])
by newgw.elsite.ru (Postfix) with SMTP
id ACC8914BC; Thu, 31 Oct 2002 12:15:51 +0300 (MSK)
From: Patrick Hopper <> patrickhopper@qnx.com
Subject: CompactPCI June E-letter
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----------2CJG6E9BAWD1CPE"
Message-Id: <> 20021031091551.ACC8914BC@newgw.elsite.ru
Date: Thu, 31 Oct 2002 12:15:51 +0300 (MSK)
To: undisclosed-recipients:;
Status: