X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=tU8TPfv2MKsWVPUsv+3J3r97ism5znn2ufuZZoSs0Yrbsg6c+4H7X
	fTEu0K5j51Hiy0OFF3n+Yvkqeg2rzzd7nB965weO8y9iv14RjLdwxdIYbKZhbNO7
	AiD1Su50zBLMzmD73mrMa5Am+imv7SPiSFrP5Z8gyEIWzKk8fDZK8k=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=BHBRkAeGqZIcmuVkST+QarM8pPg=; b=rrK70UZ3xfyXZ34rUOxtf0twOeKP
	LS549X0wbTSMDRvt/5u74rJcQ43NfKKRZWbl3pkTYThAO8JdFN4/sgZ7cb3EIMSy
	/4nN/9o6fB0kCoUNrulKXWU0elYZtXblcWjwTllpblI4U57N+UBuCppAphRMDHsV
	60XcbZPuUv+nTpE=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-96.3 required=5.0 tests=AWL,BAYES_00,GOOD_FROM_CORINNA_CYGWIN,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RDNS_DYNAMIC autolearn=ham version=3.3.2 spammy=worm, legit, H*MI:sk:c8b4fa9, H*f:sk:c8b4fa9
X-HELO: calimero.vinschen.de
Date: Thu, 9 Jun 2016 18:14:21 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: malware
Message-ID: <20160609161421.GA15058@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <0D835E9B9CD07F40A48423F80D3B5A7039D920C3 AT USA7109MB022 DOT na DOT xerox DOT net> <3227b657-3712-966a-45ed-2bdd0d96d7c3 AT gmail DOT com> <CAKepmajx8LtDyYun-++CPaSuUMZsEQMKe=P2=JSgZwv36HvmOg AT mail DOT gmail DOT com> <CAKepmai4bt1L_t+YKADFv0wX=MeNUM_D5h0iTCWFRqw=hzc5Qw AT mail DOT gmail DOT com> <c8b4fa97-b7ed-c071-da55-e7246e1a0316 AT gmail DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="bp/iNruPH9dso1Pn"
Content-Disposition: inline
In-Reply-To: <c8b4fa97-b7ed-c071-da55-e7246e1a0316@gmail.com>
User-Agent: Mutt/1.6.1 (2016-04-27)

--bp/iNruPH9dso1Pn
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jun  9 18:02, Marco Atzeri wrote:
> On 09/06/2016 17:52, Jack Adrian Zappa wrote:
> > Are you referring to the 83.dotm file?  Looks highly suspicious.  o.O
> >=20
>=20
> It is clearly spam or worse.
>=20
> But some of them will always pass whatever filter the cygwin mail
> server is implementing.
> Some of them are reaching any mailbox also company's one.

I can only agree with Marco.  Sourceware is running an agressive spam
assassin and what not which gets constantly upgraded and fed with known
spam regulary to hone the filters.  However, there's *no* way it will
always catch all spam or virus or worm.  If so, it would probably also
catch lots of legit mails.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--bp/iNruPH9dso1Pn
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=b1lW
-----END PGP SIGNATURE-----

--bp/iNruPH9dso1Pn--