et al,
Just got this today....it looks like a new one....the header is all
messed up, in addition, the Return-Path is "thewestg@..." instead of
"thewest@..."...i.e. trailing "g" added.
When I renamed the attachment "messagef.exe" and ran it from a DOS
prompt, it hung up my computer. When I C-A-D rebooted, my CMOS SETUP
came up, as if I had been into it, so it looks like the virus might be
trying to write to my CMOS...
.......gregy
[------forwarded message-------------------------]
Received: by idscc12 (mbox gfeig)
(with Cubic Circle's cucipop (v1.31 1998/05/13) Thu Nov 1 16:50:16 2001)
X-From_: [EMAIL PROTECTED] Wed Oct 31 19:06:47 2001
Return-Path: <[EMAIL PROTECTED]>
Received: from robin.mail.pas.earthlink.net (robin.mail.pas.earthlink.net
[207.217.120.65])
by idscc12.onewest.net (8.12.0/8.12.0) with ESMTP id fA126iuM012192
for <[EMAIL PROTECTED]>; Wed, 31 Oct 2001 19:06:44 -0700
Received: from 209-239-210-196.oak.jps.net ([209.239.210.196]
helo=earthlink.net)
by robin.mail.pas.earthlink.net with esmtp (Exim 3.33 #1)
id 15z7Ez-00008G-00; Wed, 31 Oct 2001 18:05:58 -0800
Message-ID: <[EMAIL PROTECTED]>
Date: Wed, 31 Oct 2001 18:05:50 -0800
From: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
X-Mailer: Mozilla 4.74 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: MessageFromBoeing
Content-Type: multipart/mixed;
boundary="------------B6AFD6B297874E2FFE057B78"
This is a multi-part message in MIME format.
--------------B6AFD6B297874E2FFE057B78
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
MessageFromBoeing
--------------B6AFD6B297874E2FFE057B78
Content-Type: application/pps;
name="MessageFromBoeing.pps"
Content-Transfer-Encoding: base64
Content-Disposition: inline;
filename="MessageFromBoeing.pps"
-------------snipped attachment called MessageFromBoeing.pps-----------
-- This mail was written by user of Arachne, the Ultimate Internet Client