mailing list is swarmed by virii attachments.

Yang-Hwee TAN tanyh
Thu Mar 4 00:37:53 PST 2004

On 2004-03-04 10:09:34, vda <vda at> wrote:

> On Thursday 04 March 2004 09:49, Yang-Hwee TAN wrote:
> > hi all hostap-ients,
> >
> > from the amount of spammed mail we received every now
> > and then, either some a/c has been hacked or virii have
> > swarmed your email a/c(s).
> What is 'a/c'?

it refers to "account".

My apologies to bore the rest not interested to see if the virii 
spreading email could be tracked. you can delete this email now, 
cos the rest of the mail talks about the origination of the virii 
mail. sorry. :-)

> > also, it seems to me that jouni's email is the most abused
> > one. i've been receiving alot of virii attachments from
> > jouni's multiple email aliases. hope jouni could do a check
> > on the system(s) used to reply to this mailing list soon.
> This is because lots of folks have Jouni address in addressbooks.
> When they get infected, virus sends mails with
> From: jouni at ....
> I seriously doubt that Jouni's boxes got infected.
> Please check source ip/hostname if you want to know
> from where it really came. Never trust "From:"

I certainly hope its not infecting jouni's box.

Here the mail header from 1 of the many virii mails,
the mail seems to start from a Polish IP...

-N b- 55/55: jkmaline at     USA government abolishes the capital punishment

Return-Path: < at>
Delivered-To: tanyh at
Received: (qmail 14961 invoked from network); 4 Mar 2004 07:29:27 -0000
Received: from unknown (HELO (
  by with DES-CBC3-SHA encrypted SMTP; 4 Mar 2004 07:29:27 -0000
Received: from (localhost [])
        by (Postfix) with ESMTP id A99722352A
        for <tanyh at>; Thu,  4 Mar 2004 00:29:23 -0700 (MST)
X-Original-To: hostap at
Delivered-To: hostap at
Received: from (
        by (Postfix) with ESMTP id 8CFB42100C
        for <hostap at>; Thu,  4 Mar 2004 00:27:28 -0700 (MST)
Received: from iwonabys-413 (Iwona_Bys [])
        by (Postfix) with SMTP id D05773EDF
        for <hostap at>; Thu,  4 Mar 2004 06:35:24 +0100 (CET)
Date: Thu, 04 Mar 2004 08:28:10 +0100
To: hostap at
From: jkmaline at
Message-ID: <fwxwgoigukcmldxyfiu at>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="--------ixcanmdrajyjhorputdk"
Subject: USA government abolishes the capital punishment
X-BeenThere: hostap at
X-Mailman-Version: 2.1.2
Precedence: list
List-Id: HostAP Project  <>
List-Unsubscribe: <>,
        <mailto:hostap-request at>
List-Archive: <>
List-Post: <mailto:hostap at>
List-Help: <mailto:hostap-request at>
List-Subscribe: <>,
        <mailto:hostap-request at>
Sender: at
Errors-To: at


If you can read Polish perhaps u can share with us what it says 
in this url, one of the IPs within the 
same subnet as the virii mail. The webpage seems to be "explaining" 
a PC virus/worm.


More information about the Hostap mailing list