Swerve, From your short description, this resembles the characteristics of the SirCam virus, which sends random files from the affected workstation to others (e.g. to you) containing the virus, but it appends a second file extension to the attached file names, resulting in a double file extension. ".lnk" is one of the extensions appended by SirCam.
So, either you don't have an up-to-date anti-virus package running on your workstation (or it would've automatically dealt with this), or you have your anti-virus package set to only scan "Program Files" and the ".lnk" file extension is often not included in the default definition of "Program Files" in some anti-virus packages. Therefore, if you package allows it, add .lnk to the list of file extensions to check when only checking for Program Files. Re SirCam, you'll probably want to add .lnk, .pif and .bat. But really, don't take my word on it -- refer to one of the many anti-virus websites for up-to-date and accurate info on SirCam (if that is what you have been sent), and how to deal with it. Doug At 02:36 PM 11/13/01, you wrote: >Just got 9 messages from MAILER-DAEMON > >had an attach. marked POETRY.doc.lnk > >anyone know what that file suffix means? > >this happened last week as well. different email address and slightly dif >doc suffix. > >anyone getting this strange kind of spam/virus stuff? > >thanks. > >Swerve -- Doug Braun Emerge2 Digital Inc. "evolving business to digital" E-mail: [EMAIL PROTECTED] Tel: 519-886-0100 Fax: 519-886-1027 Corporate: http://www.emerge2.com E-Commerce: http://www.GalileoCommerce.com
