In case anyone's interested in the last Received: header on that message, here it is:
Delivered-To: gimp-user@lists.xcf.berkeley.edu Received: from kamery.org (pe113.radomsko.sdi.tpnet.pl [217.96.203.113]) by lists.XCF.Berkeley.EDU (Postfix) with SMTP id 28EDC11418 for <gimp-user@lists.xcf.berkeley.edu>; Mon, 14 Feb 2005 04:40:37 -0800 (PST) I have the rest of the message saved if anyone wants to do any forensics on it. The attachment is named viupd02.cpl, size 34k, type application/octet-stream. Apparently .cpl relates to the "Windows Control Panel". If it's a Bagel virus, they'll probably keep coming until the owner of the infected machine finally notices. Sometimes this takes months. Blocking by attachment type is one way to filter virus postings. It may not get .zip attachments (since there's sometimes a legitimate reason to attach a zip) but it can block most of the other common virus payloads. Obviously blocking common Windows mail user-agents doesn't touch viruses, since viruses aren't using Outlook or whatever. But I think that suggestion was tongue in cheek anyway. ...Akkana _______________________________________________ Gimp-user mailing list Gimp-user@lists.xcf.berkeley.edu http://lists.xcf.berkeley.edu/mailman/listinfo/gimp-user