Newsgroup: it.comp.os.linux.iniziare
Titolo: E' un virus? worm?


X-Amazon-External-Source: yes
X-Amazon-External-Envelope-Sender: ############.com
Received: from 
69-165-91-50.albyny.adelphia.net
 ([69.165.91.50]) by 
iad2-svc-fw-2102.iad2.amazon.com
           via smtpd (for 
mail-border-1002.vdc.amazon.com
 
[10.134.1.251]) with ESMTP; Sun, 25 Jul 2004 09:24:55 -0400
From: #######@#####.com
To: 
auto-c...@amazon.com
Subject: Mail Delivery (failure 
auto-c...@amazon.com
)
Date: Sun, 25 Jul 2004 06:04:23 -0400
MIME-Version: 1.0
Content-Type: multipart/related;
         type="multipart/alternative";
         boundary="----=_NextPart_000_001B_01C0CA80.6B015D10"
X-Priority: 3
X-MSMail-Priority: Normal
X-PMX-Version: 4.6.1.107272, Antispam-Core: 4.6.1.104326, Antispam-Data: 
2004.7.24.108491
X-PerlMx-Spam: Gauge=XIIIIIIIII, Probability=19%, Report='RELAYING_FRAME 
1.015, PRIORITY_NO_NAME 0.716, EXTRA_MPART_TYPE 0.444, __MIME_VERSION 0, 
__CTYPE_MULTIPART_ALT 0, __NEXTPART_ALL 0, __CT 0, __CTYPE_HAS_BOUNDARY 
0, __CTYPE_MULTIPART 0, __NEXTPART_NORMAL 0, __HAS_X_PRIORITY 0, 
__HAS_MSMAIL_PRI 0, __TAG_EXISTS_BODY 0, __TAG_EXISTS_META 0, 
__MIME_HTML 0, __TAG_EXISTS_HTML 0, NO_REAL_NAME 0.000, 
__TAG_EXISTS_HEAD 0, HTML_50_70 0, __TO_MALFORMED_2 0'
This is a multi-part message in MIME format.
------=_NextPart_000_001B_01C0CA80.6B015D10
Content-Type: multipart/alternative;
         boundary="----=_NextPart_001_001C_01C0CA80.6B015D10"
------=_NextPart_001_001C_01C0CA80.6B015D10
Content-Type: text/plain;
         charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
------=_NextPart_001_001C_01C0CA80.6B015D10
Content-Type: text/html;
         charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2920.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>If the message will not displayed automatically,<br>
follow the link to read the delivered message.<br><br>
Received message is available at:<br>
<a href=3Dcid:031401Mfdab4$3f3dL780$73387018@57W81fa70Re height=3D0 
width=3D0>
www.amazon.com/inbox/auto-confirm/read.php?sessionid-10147
</a>
<iframe
src=3Dcid:031401Mfdab4$3f3dL780$73387018@57W81fa70Re height=3D0 
width=3D0></iframe>
<DIV>&nbsp;</DIV></BODY></HTML>
------=_NextPart_001_001C_01C0CA80.6B015D10--
------=_NextPart_000_001B_01C0CA80.6B015D10
Content-Type: audio/x-wav;
         name="message.scr"
Content-Transfer-Encoding: base64
Content-ID: <031401Mfdab4$3f3dL780$73387018@57W81fa70Re>
TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAYAAAAA4fug4AtAnNIbgBTM0hV2luZG93cyBQcm9ncmFtDQokUEUAAEwBAwAAAAAA
AAAAAAAAAADgAA8BCwEAAAAEAAAAcgAAAAAAAAAgAQAAEAAAACAAAAAAQAAAEAAAAAIAAAQA
AAAAAAAABAAAAAAAAAAAMAEAAAQAAAAAAAACAAAAAAAQAAAQAAAAABAAAB
............."
or
"
A: #######.com
Oggetto: important
Data: Fri, 23 Jul 2004 23:25:54 -0400
MIME-Version:  1.0
Content-Type:  multipart/mixed; 
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority:  3
X-MSMail-Priority:  Normal
X-UIDL:  A0GaIi00N5k9fxOFrBBU
X-Evolution-Source:  pop://
Fabio.DiBenedetto%40katam...@pop.katamail.com
Message-Id:  <1090686823.2811.0.camel@localhost>	
Your details.
con in allegato un file zip furbamente contenente qualcosa tipo 
dettail.txt		.pif"
E' il mio pc ad essere infestato o quello di qualcuno che ha la mia mail?
Grazie, ciao!

 mandati) con allegati tipo message.scr  o *.*.pif
I file di tipo .scr sono screensaver, in pratica .exe con un altra
estensione, mentre i .pif (Program Information File) sono file contenenti
istruzioni che dicono a Windows come eseguire programmi "non Windows" come
i DOS. In entrambi i casi sono file che hanno senso solo in un sistema
Windows e Linux se la ride :)
Ciao. 
-- 
~~~~Slaine Mc Roth~~~~
**Linux User# 312607**
Ciascuno di noi ha, nella propria vita, pagine ch'egli non conosce e che
sono scritte per merito degli altri.  (Georges Goyau)

 
Grazie della buona notizia! :)