It is likely a spoofed address. Just delete it. Doug
--- Will Hill <[EMAIL PROTECTED]> wrote: > dhcp64-134-64-55.wgp.atl.wayport.net > which indeed resolves to 64.134.64.55 > is infected. > > I got a message, forged from another LUG member. > Neither of us have windoze > email, so I thought I'd pass along the info to see > if anyone here recognized > the address. > > The message had the above subject, text that says > "Argh, i don't > like the plaintext :)" and a password protected > zip file. The package is > a win32 executable, in my case "rckokpeba.exe". > Strings shows the typical > calls to KERNEL32.DLL and USER32.DLL > > > _______________________________________________ > General mailing list > [email protected] > http://brlug.net/mailman/listinfo/general_brlug.net ===== Warmest Regards, Doug Riddle An opptimist thinks the glass is half full. A pessimist thinks it is half empty. A realist knows that someone is going to have to wash the glass. I am a realist. I buy plastic drink cups. __________________________________ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover
