Somebody received this spam (or virus) too from the fedora users list?

[Joachim Backes]

There is an attached zip "message.zip" file containing a Win executable!
I removed it.

-------- Original Message --------
Date: Wed, 29 Jun 2011 10:20:05 +0400
From: [e-mail]
Reply-To: Community support for Fedora users 
To: [e-mail]

Dear user of lists.fedoraproject.org, administration of
lists.fedoraproject.org would like to let you know the following.

Your account was used to send a large amount of unsolicited commercial
email messages during the last week.
Obviously, your computer was infected and now contains a trojan proxy
server.

Please follow the instructions in the attached text file in order to
keep your computer safe.

Best regards,
The lists.fedoraproject.org team.
-----------------------------------------------------------------

[Frank Murphy]

On 29/06/11 07:42, Joachim Backes wrote:
> There is an attached zip "message.zip" file containing a Win executable!
> I removed it.

Not here.

[Maurizio Marini]

On Wed, 29 Jun 2011 07:50:29 +0100
Frank Murphy  wrote:
> On 29/06/11 07:42, Joachim Backes wrote:
> > There is an attached zip "message.zip" file containing a Win executable!
> > I removed it.

From: "Content-filter at makuta.datalogica.com"
 To: 
Subject: VIRUS (Worm.Mydoom.M) in mail FROM [209.132.181.3]
 Date: Wed, 29 Jun 2011 08:20:38 +0200
(CEST)

A virus was found: Worm.Mydoom.M

Scanner detecting a virus: ClamAV-clamd

Content type: Virus
Internal reference code for the message is 32119-16/666mXhNXRQy7

First upstream SMTP client IP address: [209.132.181.3] 
According to a 'Received:' trace, the message originated at: [109.127.6.236],
  mail-archive.com unknown [109.127.6.236]

Return-Path: 
From: [e-mail]
Sender: [e-mail]
Message-ID: 
Not quarantined.

Notification to sender will not be mailed.

The message WAS NOT relayed to:
:
   250 2.7.0 Ok, discarded, id=32119-16 - INFECTED: Worm.Mydoom.M

Virus scanner output:
  p005: Worm.Mydoom.M FOUND

Return-Path: 
Received: from bastion.fedoraproject.org (bastion02.fedoraproject.org
[209.132.181.3]) by makuta.datalogica.com (Postfix) with ESMTP id C290D514547
    for ; Wed, 29 Jun 2011 08:20:37 +0200 (CEST)
Received: from lists.fedoraproject.org (collab1.vpn.fedoraproject.org
[192.168.1.21]) by bastion02.phx2.fedoraproject.org (Postfix) with ESMTP id
599A7110733; Wed, 29 Jun 2011 06:20:22 +0000 (UTC)
Received: from collab1.fedoraproject.org (localhost.localdomain [127.0.0.1])
    by lists.fedoraproject.org (Postfix) with ESMTP id 4E20E3267A6;
    Wed, 29 Jun 2011 06:20:21 +0000 (UTC)
X-Original-To: [e-mail]
Delivered-To: [e-mail]
Received: from smtp-mm03.fedoraproject.org (vm4.fedora.ibiblio.org
    [152.19.134.143])
    by lists.fedoraproject.org (Postfix) with ESMTP id 7620B32679F
    for ;
    Wed, 29 Jun 2011 06:20:10 +0000 (UTC)
Received: from mail-archive.com (unknown [109.127.6.236])
    by smtp-mm03.fedoraproject.org (Postfix) with ESMTP id 3B98137D6A
    for ;
    Wed, 29 Jun 2011 06:20:07 +0000 (UTC)
From: [e-mail]
To: [e-mail]
Subject: 
Date: Wed, 29 Jun 2011 10:20:05 +0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
    boundary="----=_NextPart_000_0006_B1BA319E.EB493580"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: 
X-BeenThere: [e-mail]
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Community support for Fedora users 
List-Id: Community support for Fedora users <users.lists.fedoraproject.org>
List-Unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/users,
    
List-Archive: http://lists.fedoraproject.org/pipermail/users
List-Post: 
List-Help: 
List-Subscribe: https://admin.fedoraproject.org/mailman/listinfo/users,
    
Sender: [e-mail]
Errors-To: [e-mail]

[Ed Greshko]

Joachim Backes  wrote:
> There is an attached zip "message.zip" file containing a Win
> executable! I removed it.

I deleted it without a second thought.

[Bryn M. Reeves]

On 06/29/2011 07:42 AM, Joachim Backes wrote:
> There is an attached zip "message.zip" file containing a Win executable!
> I removed it.
>
> -------- Original Message --------
> Date: Wed, 29 Jun 2011 10:20:05 +0400
> From: [e-mail]
> Reply-To: Community support for Fedora users 
> To: [e-mail]
>
> Dear user of lists.fedoraproject.org, administration of
> lists.fedoraproject.org would like to let you know the following.
>
> Your account was used to send a large amount of unsolicited commercial
> email messages during the last week.
> Obviously, your computer was infected and now contains a trojan proxy
> server.
>
> Please follow the instructions in the attached text file in order to
> keep your computer safe.
>
> Best regards,
> The lists.fedoraproject.org team.

Forged headers and a body designed to con unwary users into running the
attachment on their Windows PC in order to infect it.

The Fedora infrastructure administrators tend not to send mail from
"[e-mail]".

With the full headers you might be able to figure out more about where it came
from but I didn't receive a copy at all so I'm doubtful it even passed through
the lists infrastructure (you can put more-or-less anything you like in the
Reply-to and to fields of an email).

Regards,
Bryn.

[Klaus-Peter Schrage]

Am 29.06.2011 08:42, schrieb Joachim Backes:
> There is an attached zip "message.zip" file containing a Win executable!
> I removed it.
>
> -------- Original Message --------

My mail provider caught it and didn't even forward it to me. They sent 
just me a warning:

Datei: message.zip
    Virus: W32.Mydoom.M

Es folgen Details zu der betroffenen E-Mail:

Von:[e-mail]
     An:[e-mail]
     Datum:   Wed, 29 Jun 2011 10:20:05 +0400
     Betreff:

Klaus