These days folk who launch virii in email often use legitimate sender addresses in an attempt to seduce would-be victims into opening the attachments! ALL mail is potentially a problem, and just because you think you recognise the sender's mail address, that does not mean that the mail is legitimate. Mail sent earlier today using my address as the supposed sender contains a virus. The mail originated from the IP address 221.239.1.146 The whois record for this address is: inetnum: 221.239.1.144 - 221.239.1.151 netname: TIANJIN-WAIDAIHUOYUN-LTD descr: WAIDAIHUOYUN-LTD descr: TIANJIN CITY country: CN admin-c: AT370-AP tech-c: AT370-AP mnt-by: MAINT-CHINANET-TJ status: ASSIGNED NON-PORTABLE changed: ipadmin at north dot cn dot net 20070807 source: APNIC person: admin tjtele nic-hdl: AT370-AP e-mail: ipadmin at north dot cn dot net address: No.11 LIUJING ROAD ,HEDONG ,TIANJIN,CHINA phone: +86-22-85580499 fax-no: +86-22-85580970 country: CN changed: ipadmin at north dot cn dot net 20060508 mnt-by: MAINT-CHINANET-TJ source: APNIC The folk from Chinanet may want to followup and disinfect this client system. thanks, Geoff -- Geoff Huston Chief Scientist, APNIC +61 7 3858 3100 gih at apnic dot net
Attachment:
smime.p7s
Description: S/MIME cryptographic signature