TIP: Click on subject to list as thread! ANSI
echo: alt-comp-anti-virus
to: ALL
from: DAVID RITZ
date: 2014-10-09 23:04:00
subject: Re: Viral sample (October

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday, 09 October 2014 20:30 -0400, 
 in article , 
 Virus Guy and MISSINGVirusTERMINATOR  wrote:

> Sent to me via 24.243.166.171 (cpe-24-243-166-171.hot.res.rr.com)

$ blq -ant cbl,xbl,pbl,spamcop,sorbs,uce 24.243.166.171
24.243.166.171 : cbl.abuseat.org : BLOCKED (127.0.0.2)
    Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=24.243.166.171
24.243.166.171 : xbl.spamhaus.org : BLOCKED (127.0.0.4)
    http://www.spamhaus.org/query/bl?ip=24.243.166.171
24.243.166.171 : pbl.spamhaus.org : BLOCKED (127.0.0.10)
    http://www.spamhaus.org/query/bl?ip=24.243.166.171
24.243.166.171 : bl.spamcop.net : BLOCKED (127.0.0.2)
    Blocked - see http://www.spamcop.net/bl.shtml?24.243.166.171
24.243.166.171 : dnsbl.sorbs.net : BLOCKED (127.0.0.10)
    Dynamic IP Addresses See:
        http://www.sorbs.net/lookup.shtml?24.243.166.171
24.243.166.171 : dnsbl-1.uceprotect.net : BLOCKED (127.0.0.2)
    IP 24.243.166.171 is UCEPROTECT-Level 1 listed. See
        http://www.uceprotect.net/rblcheck.php?ipr=24.243.166.171

The copy I received, from a quite different IP address, didn't even 
make it as far as the spam filters.

 X-Quarantine-ID: 
 X-Amavis-Alert: BANNED, message contains
         .exe,.exe-ms,Copy_of_document_Oct-09-2014.exe

$ sweep banned-OWiIwps2hrtt Note_4286_copy.zip Copy_of_document_Oct-09-2014.exe
>>> Virus 'Troj/Invo-Zip' found in file banned-OWiIwps2hrtt
>>> Virus 'Troj/Invo-Zip' found in file Note_4286_copy.zip
>>> Virus 'Mal/Wonton-G' found in file Copy_of_document_Oct-09-2014.exe

Now, I'll cry you a river, over your inability^W unwillingness to use 
DNSbls.  That PBL (Policy Block List) listing is in place, because 
Road Runner _states_ that this address should never be used to deliver 
mail directly to MX.  It's your choice, not to follow Road Runner's 
recommendation.

Would you like some cheese, to go with your whine?

- -- 
David Ritz 
 Be kind to animals; kiss a shark.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlQ39WwACgkQUrwpmRoS3ut7SACgsGtvXfDR4quQU47WOMgpLmK+
g5QAn3m89pumFz/m1ykPubQOWy5y7/61
=Y0z9
-----END PGP SIGNATURE-----
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

SOURCE: echomail via QWK@docsplace.org

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.