Permalink

1

#2012 – waited for the worms

Return-Path:

Received: from dirac-rip (dirac-rip.kinkos.com [170.170.4.195])

by mx3in.umbc.edu (8.12.8/8.12.8/UMBC-Central 1.11 mxdel 1.1.2.9 $) with ESMTP id h7JHDucO008092

for ; Tue, 19 Aug 2003 13:13:57 -0400 (EDT)

Received: from autoreply-daemon.dirac.kinkos.com by dirac.kinkos.com

(iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003))

id <0HJV00J02MF4FD@dirac.kinkos.com> for gfitzp1@umbc.edu; Tue,

19 Aug 2003 10:11:28 -0700 (PDT)

Date: Tue, 19 Aug 2003 10:11:28 -0700 (PDT)

From: usa1824@kinkos.com

Subject: Re: Re: Approved

In-reply-to: <0HJV00DZYMIVQ6@pfsma01.kinkos.com>

To: gfitzp1@umbc.edu

Message-id: <0HJV00J03MF4FD@dirac.kinkos.com>

MIME-version: 1.0

Content-type: text/plain; charset=iso-8859-1

Content-transfer-encoding: 7BIT

X-Milter-Key: 1061313543:f1c4e177a467aab33c2f5a71883bbb86

X-Avmilter: Message Skipped, too small

X-Spam-Status: hits=1.4 rating= tests=FROM_ENDS_IN_NUMS,NO_REAL_NAME

X-Processed-By: MilterMonkey Version 0.9 — http://www.membrain.com/miltermonkey

Thank you for your e-mail.

If you have sent this message to place an order, please call your Kinko’s Project Manager at 410-964-9891 to confirm your order. The Kinko’s Project Manager will confirm:

* That your order was received

* Pricing and payment method

* Expected delivery date for your order

Did you know that you can submit your orders using our newest online service, Print to Kinko’s (www.kinkos.com/p2k). It’s a fast, easy, and convenient way to send your documents online.

With Print to Kinko’s, you can have your document printed at any of our participating Kinko’s branches nationwide. The Kinko’s store you select is notified immediately that an order has been placed. It is not necessary for you to call to confirm. You will see the price of your order when you place it, and payment can be made online with any major credit card or Kinko’s Commercial Account Card. Specify your time and choice of delivery, and Kinko’s can deliver it to you in as little as four hours.

To get started, simply click the following link, or copy and paste it into the address bar on your browser: www.kinkos.com/p2k.

For more information about other Kinko’s services, or to receive customer assistance, please call 1-800-2-KINKOS.

Thank you for your business!

Terms and Conditions:

This e-mail transmission is not encrypted and offers no security protection. Any material you send could be viewed by a third party while in transit.

If the document you are sending is copyright or trademark protected in whole or in part, please note that Kinko’s requires written permission from the copyright or trademark holder in order to reproduce copyright or trademark protected works.

By submitting this file I warrant that the documents I submit via this e-mail transmission are not protected under copyright or trademark laws or that I have the authority to print or reproduce the files. I hereby agree to indemnify and hold Kinko’s harmless from any suit, demand, or claim made against Kinko’s by reason of breach of this warranty, and I agree to any judgment or reasonable settlement offer resulting from any such suit, demand, or claim, and to pay any attorney’s fees incurred by Kinko’s in defending against such suit, demand, or claim. I agree that Kinko’s may provide a copy of this statement to anyone claiming infringement of copyright or trademark in the file(s) being submitted.

By transmitting your order you are agreeing to the foregoing indemnification of Kinko’s.

—–

Return-Path:

Received: from hawking.kinkos.com (hawking.kinkos.com [170.170.4.207])

by mx7in.umbc.edu (8.12.8/8.12.8/UMBC-Central 1.11 mxdel 1.1.2.9 $) with ESMTP id h7JHLEbZ010677

for ; Tue, 19 Aug 2003 13:21:14 -0400 (EDT)

Received: from PFWMA02.corp.kinkos.com (79-2.kinkos.com [170.170.2.79])

by hawking.kinkos.com

(iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003))

with ESMTP id <0HJV004PQMV5DE@hawking.kinkos.com> for gfitzp1@umbc.edu; Tue,

19 Aug 2003 10:21:06 -0700 (PDT)

Received: from PFWMA02.corp.kinkos.com ([172.30.110.51])

by PFWMA02.corp.kinkos.com with Microsoft SMTPSVC(5.0.2195.6713); Tue,

19 Aug 2003 10:21:06 -0700

Received: from 172.30.110.66 by PFWMA02.corp.kinkos.com

(InterScan E-Mail VirusWall NT); Tue, 19 Aug 2003 10:21:06 -0700

Received: from mail pickup service by PFWMA11.corp.kinkos.com with Microsoft

SMTPSVC; Tue, 19 Aug 2003 10:21:05 -0700

Date: Tue, 19 Aug 2003 10:21:05 -0700

From: Antigen_PFWMA10@kinkos.com

Subject: Antigen found VIRUS= Win32.Sobig.F (CA(Vet),Sophos) worm

To: gfitzp1@umbc.edu

Message-id:

Content-transfer-encoding: 7BIT

X-OriginalArrivalTime: 19 Aug 2003 17:21:05.0846 (UTC)

FILETIME=[45B96D60:01C36676]

X-Milter-Key: 1061313981:f619f7cd9b7d926ceb68b1dff87b1d7a

X-Avmilter: Message Skipped, too small

X-Spam-Status: hits=2.0 rating=S tests=FROM_ENDS_IN_NUMS,FROM_HAS_UNDERLINE_NUMS,NO_REAL_NAME

X-Processed-By: MilterMonkey Version 0.9 — http://www.membrain.com/miltermonkey

Antigen for Exchange found movie0045.pif infected with VIRUS= Win32.Sobig.F (CA(Vet),Sophos) worm.

The message is currently Purged. The message, “Re: Your application”, was

sent from gfitzp1@umbc.edu and was discovered in SMTP MessagesInbound And Outbound

located at kinkos/First Administrative Group/PFWMA10.

—–

Return-Path:

Received: from dirac-rip (dirac-rip.kinkos.com [170.170.4.195])

by mx6in.umbc.edu (8.12.8/8.12.8/UMBC-Central 1.11 mxdel 1.1.2.9 $) with ESMTP id h7JHRM7q007981

for ; Tue, 19 Aug 2003 13:27:22 -0400 (EDT)

Received: from autoreply-daemon.dirac.kinkos.com by dirac.kinkos.com

(iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003))

id <0HJV00K0BMU8NG@dirac.kinkos.com> for gfitzp1@umbc.edu; Tue,

19 Aug 2003 10:20:32 -0700 (PDT)

Date: Tue, 19 Aug 2003 10:20:32 -0700 (PDT)

From: usa0917@kinkos.com

Subject: Re: Re: That movie

In-reply-to: <0HJV0048ZMY0DE@hawking.kinkos.com>

Message-id: <0HJV00K0CMU8NG@dirac.kinkos.com>

MIME-version: 1.0

Content-type: text/plain; charset=iso-8859-1

Content-transfer-encoding: 7BIT

X-Milter-Key: 1061314350:9d05422c89d66ef70f351fe1378a9f3a

X-Avmilter: Message Skipped, too small

X-Spam-Status: hits=1.5 rating= tests=FROM_ENDS_IN_NUMS,MISSING_HEADERS,NO_REAL_NAME

X-Processed-By: MilterMonkey Version 0.9 — http://www.membrain.com/miltermonkey

Thank you for your e-mail.

If you have sent this message to place an order, please call your Kinko’s Project Manager at 301-725-4933 to confirm your order. The Kinko’s Project Manager will confirm:

* That your order was received

* Pricing and payment method

* Expected delivery date for your order

Did you know that you can submit your orders using our newest online service, Print to Kinko’s (www.kinkos.com/p2k). It’s a fast, easy, and convenient way to send your documents online.

With Print to Kinko’s, you can have your document printed at any of our participating Kinko’s branches nationwide. The Kinko’s store you select is notified immediately that an order has been placed. It is not necessary for you to call to confirm. You will see the price of your order when you place it, and payment can be made online with any major credit card or Kinko’s Commercial Account Card. Specify your time and choice of delivery, and Kinko’s can deliver it to you in as little as four hours.

To get started, simply click the following link, or copy and paste it into the address bar on your browser: www.kinkos.com/p2k.

For more information about other Kinko’s services, or to receive customer assistance, please call 1-800-2-KINKOS.

Thank you for your business!

Terms and Conditions:

This e-mail transmission is not encrypted and offers no security protection. Any material you send could be viewed by a third party while in transit.

If the document you are sending is copyright or trademark protected in whole or in part, please note that Kinko’s requires written permission from the copyright or trademark holder in order to reproduce copyright or trademark protected works.

By submitting this file I warrant that the documents I submit via this e-mail transmission are not protected under copyright or trademark laws or that I have the authority to print or reproduce the files. I hereby agree to indemnify and hold Kinko’s harmless from any suit, demand, or claim made against Kinko’s by reason of breach of this warranty, and I agree to any judgment or reasonable settlement offer resulting from any such suit, demand, or claim, and to pay any attorney’s fees incurred by Kinko’s in defending against such suit, demand, or claim. I agree that Kinko’s may provide a copy of this statement to anyone claiming infringement of copyright or trademark in the file(s) being submitted.

By transmitting your order you are agreeing to the foregoing indemnification of Kinko’s.

—–

Due to the number of submissions received from customers, Symantec Security Response has upgraded this threat to a Category 3 from a Category 2 threat.

W32.Sobig.F@mm is a mass-mailing, network-aware worm that sends itself to all the email addresses that it finds in the files with the following extensions…

i’m mad about this. someone’s got a worm on their computer sending out emails to kinkos (????) (and in the past minute i’ve got another response from kinkos and one from help@winzip.com) sending out emails purporting to be ME infecting their machines. grrr… >_< GET A FRIGGIN ANTIVIRUS PROGRAM IF YOU’VE GOT WINDOWS. goddamn. grrrr.

*angers*

UPDATE: world squirms as sobig returns

1 Comment