cyrus list problem?

[Eric J. Wisti]

info-cyrus at lists.andrew.cmu.edu is receiving the email and kindly
forwarding us copies of the virus.

Here is where the message originated from (deepest Received header, it may
be someone before this server):

Received: from lists.andrew.cmu.edu ([135.216.241.44])
     by lists2.andrew.cmu.edu (8.12.10/8.12.10) with ESMTP id i6QJeku3004921
     for <info-cyrus at lists.andrew.cmu.edu>; Mon, 26 Jul 2004 15:40:46 -0400

135.216.241.44:
Search results for: ! NET-135-216-0-0-1


OrgName:    AT&T Bell Laboratories
OrgID:      ATT
Address:    3200 Lake Emma Road
City:       Lake Mary
StateProv:  FL
PostalCode: 32746
Country:    US

NetRange:   135.216.0.0 - 135.216.255.255
CIDR:       135.216.0.0/16
NetName:    ATTWS-135-216-R
NetHandle:  NET-135-216-0-0-1
Parent:     NET-135-197-0-0-1
NetType:    Reassigned
NameServer: REDDNS1.ATTWS.COM
NameServer: REDDNS4.ATTWS.COM
NameServer: UDNS1.ULTRADNS.NET
NameServer: UDNS2.ULTRADNS.NET
Comment:
RegDate:    2003-07-22
Updated:    2003-07-22

OrgTechHandle: IAA8-ARIN
OrgTechName:   IP Address Administrator
OrgTechPhone:  +1-407-805-4957
OrgTechEmail:  lperkins at att.com

It may be someone trying to seed a virus as well... I'm nearing 30+ since
8am CDT.

Eric

Michael Menefee said:
> Don't think it's spooded...all the ones I've received today came from
> 128.2.10.216, which is registered as a Carnegie Mellon University IP
> Address...
>
> -----Original Message-----
> From: Eric J. Wisti [mailto:info-cyrus at wisti.com]
> Sent: Monday, July 26, 2004 2:46 PM
> To: M
> Cc: info-cyrus at lists.andrew.cmu.edu
> Subject: Re: cyrus list problem?
>
>
> Appears that the W32.Mydoom.M at mm was released today:
>
> http://www.sarc.com/avcenter/venc/data/w32.mydoom.m@mm.html
>
> I have over 20 in the past 4 hours...
>
> Standard rules apply: Don't open, press delete.
>
> Eric
>
> M said:
>> Is everyone receiving "interesting" messages from the CMU postmaster
>> (or a spoof of it)?
>>
>>
>> ---
>> Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ:
>> http://cyruswiki.andrew.cmu.edu List Archives/Info:
>> http://asg.web.cmu.edu/cyrus/mailing-list.html
>>
>
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ:
> http://cyruswiki.andrew.cmu.edu List Archives/Info:
> http://asg.web.cmu.edu/cyrus/mailing-list.html
>
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.725 / Virus Database: 480 - Release Date: 7/19/2004
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.725 / Virus Database: 480 - Release Date: 7/19/2004
>
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html