Hi Thomas: On Thu, 29 Nov 2001 06:24:31 -0500 (EST), you wrote:
<snip> > There has been an epidemic of this virus among members of an aromatherapy list, > many of whom use Outlook Express with its house-of-cards security. I received > two messages containing what appeared likely to be the New Improved Badtrans, > which I saw as base64 code and declined to decode. I noticed _ prepended to the > From-address, thus in the extremely unlikely event that such a message came from > you, the From: line would look like > From: "Samuel W. Heywood" <[EMAIL PROTECTED]> > So when I reply to tell them they have a virus, I edit out this leading > underscore. Very acute observation, Thomas! I failed to notice the underscore prepended to the email address of the person whose computer purportedly sent the virus to my machine. I have reviewed the message containing the copy of the virus that I received and I too noticed the underscore prepended to the email address of the purported sender. Also I should like to mention that my copy of the virus also was disguised as an MP3 file. Sam Heywood -- This mail was written by user of The Arachne Browser - http://arachne.cz/
