virus mail

["Winfried Meining" <wim@DROPMEcsb.ki.se>]

Dear subscribers of the mcfa-int@DROPMEmariecurie.org mailing list,

Today an e-mail was sent to this list that unfortunately produced all 
kinds of troubles. This e-mail looked like a message from the 
mariecurie.org IT management team as it was telling you that your 
account has been disabled. This e-mail was a fake and the sender 
address (management@DROPMEmariecurie.org) does not even exist. The MCFA IT 
management team never sent such a message. Even worse, it contained 
the virus W32/Bagle.k@DROPMEMM in an attached file (document.pif). 

If you have received this e-mail and your mail server has not removed 
the attachment, please disregard this e-mail and remove it from your 
system as your computer could be infected as soon as you open the 
attachment. 

Those of you who are protected by mail servers, which can identify 
viruses in e-mails, have most likely not received this virus e-mail 
or received only an e-mail with the attachment removed. Those mail 
servers have now in many cases sent back a "bounce" e-mail to the 
sender address "management@DROPMEmariecurie.org". This "bounce" message was 
interpreted by our mail system such that the e-mail account which is 
hosted by the bouncing server is disabled and that it therefore 
cannot receive e-mails anymore. The standard behaviour in such cases 
is that this address suspended from all current subscriptions of MCFA 
mailing lists with the effect that today many subscribed e-mail 
addresses were suspended from our mailing lists. In the event your e-
mail was suspended you have received a message saying that the 
mariecurie.org has responded on a suspend request from you. Please 
don't worry about this notification. Nobody tried to send a suspend 
request in your name, it was rather the mariecurie.org mailing list 
system that generated a suspend request in your name.

I must apologize for this unfortunate cascade of events. As a 
consequence I have done the following:

I have resubscribed all suspended accounts. In case I have overlooked 
accounts these accounts will be automatically resubscribed within one 
or two days.

Attachment with the endings: bat, scr, exe, pif, zip are from now on 
not allowed anymore, that is messages containing an attachment of 
this type are not forwarded to the list. There will be no error 
message sent to the sender of the message, but the message is stored 
locally and can be forwarded manually if appropriate.

Bounce messages indicating that a virus containing message was 
blocked do from now on not lead to an automatic suspension of the 
account anymore.

You are most welcome to contact David Atienza 
(datienza@DROPMEmariecurie.org, the co- MCFA IT manager) and myself if you 
have questions.

With best regards,

Winfried Meining



-----------------------------------
Dr. Winfried Meining
Marie Curie Fellowship Association
Information Management
http://www.mariecurie.org/
wmeining@DROPMEmariecurie.org