Re[2]: Don't OPEN IT!!!!!!!!!!Re: [at-l] Please try again

[mmatga2me99@trail-life.com (Todd "M&M" Ricker)]

----- Original Message -----
From: "Orange Bug" <>
To: <>
Sent: Sunday, June 02, 2002 8:07 PM
Subject: Re: Re[2]: Don't OPEN IT!!!!!!!!!!Re: [at-l] Please try again


| Dawg, I didn't know there were viruses or virus software written for
| Commodore's anymore. I think you are safe. ;-)
|
| Actually, you are fairly new to this list. I suspect that the key folks
| receiving the virus message are us oldtimers on the list in Wild Bill's
| address book. Since David (He Who Hath No Trailname) just changed
| addresses, I'll bet he didn't get one at his new address. Wild Bill
| left about a year ago related to severely off topic and off tone
| messages.
|
| Bill...
|

There is a good chance that Wild Bill never sent it, but instead the virus
used Wild Bills address from someones address book from someone who is
active currently and put it in the header info.  I have seen worse happen.
Matter of fact just received another copy of the virus from sushecht@aol.com
but if you look at the header info you will see it was sent by roy@dhc.net

Here is the copy of the header to see

Return-path: <roy@dhc.net>
Envelope-to: my-email@trail-life.com
Delivery-date: Sun, 02 Jun 2002 17:39:44 -0500
Received: from mail.dhc.net ([208.26.239.63])
 by host2.yougoweb.com with esmtp (Exim 3.35 #1)
 id 17Ee16-0003Hi-00
 for my-email@trail-life.com; Sun, 02 Jun 2002 17:39:42 -0500
Received: from Znctt (pool-141-155-23-126.ny5030.east.verizon.net
[141.155.23.126])
 by mail.dhc.net (8.11.6/8.11.6) with SMTP id g52NY0N22748
 for <my-email@trail-life.com>; Sun, 2 Jun 2002 16:34:01 -0700
Date: Sun, 2 Jun 2002 16:34:01 -0700
Message-Id: <200206022334.g52NY0N22748@mail.dhc.net>
From: sushecht <sushecht@aol.com>
To: my-email@trail-life.com
Subject: Sos!
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary=M15958F19b5k6Wz2Gj80




Neither one is from the list, but might show an example of how the virus
might work.

This is how it should look, or something like this.




Return-path: <my-other-email@hotmail.com>
Envelope-to: my-email@trail-life.com
Delivery-date: Sun, 02 Jun 2002 19:38:30 -0500
Received: from oe61.law12.hotmail.com ([64.4.18.196] helo=hotmail.com)
 by host2.yougoweb.com with esmtp (Exim 3.35 #1)
 id 17Efs3-0004WY-00
 for my-email@trail-life.com; Sun, 02 Jun 2002 19:38:30 -0500
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
  Sun, 2 Jun 2002 17:38:48 -0700
X-Originating-IP: [24.185.87.138]
From: "Trail-Life.com" <my-other-email@hotmail.com>
To: "Todd Ricker" <my-email@trail-life.com>
Subject: test
Date: Sun, 2 Jun 2002 20:37:50 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----=_NextPart_000_00CB_01C20A75.5D073500"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <OE614ghriS325H21qJG00003af0@hotmail.com>
X-OriginalArrivalTime: 03 Jun 2002 00:38:48.0683 (UTC)
FILETIME=[069913B0:01C20A97]

Be advised that e-mail scanners can extract e-mail addresses from the
webpages including the forums, so by posting e-mail addresses in the content
one can extract the addresses and add them to an address book for SPAM and
other maliciousness.


Hope this helps

__

T - "Semper Fidelis" - |O|

Todd "M&M" Ricker
GA>ME AT99

ICQ: 24455973
AOL/AIM: MMATGA2ME99

www.chrysalisnyac.com NYAC "Son Seekers" Chrysalis.  Forums, schedules,
applications, etc
To open soon ... www.trail-life.com  Home of the Long Distance Backpacker.
Discussion groups, articles, stories, trail info, and trail news.  Please
feel free to leave suggestions or comments.