DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=tU8TPfv2MKsWVPUsv+3J3r97ism5znn2ufuZZoSs0Yrbsg6c+4H7X
	fTEu0K5j51Hiy0OFF3n+Yvkqeg2rzzd7nB965weO8y9iv14RjLdwxdIYbKZhbNO7
	AiD1Su50zBLMzmD73mrMa5Am+imv7SPiSFrP5Z8gyEIWzKk8fDZK8k=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Thu, 9 Jun 2016 18:14:21 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: malware
Message-ID: <20160609161421.GA15058@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <0D835E9B9CD07F40A48423F80D3B5A7039D920C3@USA7109MB022.na.xerox.net> <3227b657-3712-966a-45ed-2bdd0d96d7c3@gmail.com> <CAKepmajx8LtDyYun-++CPaSuUMZsEQMKe=P2=JSgZwv36HvmOg@mail.gmail.com> <CAKepmai4bt1L_t+YKADFv0wX=MeNUM_D5h0iTCWFRqw=hzc5Qw@mail.gmail.com> <c8b4fa97-b7ed-c071-da55-e7246e1a0316@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="bp/iNruPH9dso1Pn"
Content-Disposition: inline
In-Reply-To: <c8b4fa97-b7ed-c071-da55-e7246e1a0316@gmail.com>
User-Agent: Mutt/1.6.1 (2016-04-27)

--bp/iNruPH9dso1Pn
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jun  9 18:02, Marco Atzeri wrote:
> On 09/06/2016 17:52, Jack Adrian Zappa wrote:
> > Are you referring to the 83.dotm file?  Looks highly suspicious.  o.O
> >=20
>=20
> It is clearly spam or worse.
>=20
> But some of them will always pass whatever filter the cygwin mail
> server is implementing.
> Some of them are reaching any mailbox also company's one.

I can only agree with Marco.  Sourceware is running an agressive spam
assassin and what not which gets constantly upgraded and fed with known
spam regulary to hone the filters.  However, there's *no* way it will
always catch all spam or virus or worm.  If so, it would probably also
catch lots of legit mails.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--bp/iNruPH9dso1Pn
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=b1lW
-----END PGP SIGNATURE-----

--bp/iNruPH9dso1Pn--