Doubtful it's Rick's system (but certainly possible). The BugBear virus takes names and subjects from the infected person's address book and sends it's payload so it *appears* to have come from (in this case) Rick Wilson.
Checking the IP address and mail server in the headers will probably reveal it did not, in fact, come from Rick Wilson but someone who had previously received mail from him. Matt Pobursky Maximum Performance Systems On Fri, 29 Nov 2002 13:55:01 -0500, Andrew Jenkins wrote: > Received same. now is deletia. AFAIK, the PEDA server filters out > attachments, so it must have been a direct attack. > > Rick be warned, Your system appears to be infected. > > aj > > On 01:23 PM 11/29/2002 -0500, Phillip Stevens wrote: > > > ---Phil > > > > My e-mail program just quarantined an e-mail (It identified > > BugBear) which said it was from Rick Wilson (probably it's > > _spoofed_, I haven't tried to validate it). > > > > It contained an attachment so it probably came from off-list. Had > > list topic "nVisage ??!!?" > > > > Be careful what you open. > > ---Phil * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * To post a message: mailto:[EMAIL PROTECTED] * * To leave this list visit: * http://www.techservinc.com/protelusers/leave.html * * Contact the list manager: * mailto:[EMAIL PROTECTED] * * Forum Guidelines Rules: * http://www.techservinc.com/protelusers/forumrules.html * * Browse or Search previous postings: * http://www.mail-archive.com/proteledaforum@techservinc.com * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
