On 9/6/03 2:19 pm, "Ryan" <[EMAIL PROTECTED]> wrote: > I got one as well. It has a file attached: "1.exe.scr" and looked just > like an e-mail from the list except that it was missing some of the > headers that a real e-mail from the list has. The e-mail was entitled "Two > version of evolution installed" (I see that someone else on the list has > responded to it).
Yup, me too. Except the first time received it, it didn't have the attachment. Hence the reason I responded to it. I wondered at the time why it arrived in my inbox, instead of filtering into the appropriate mailbox, and assumed at the time the OP had replied directly to one of my recent posts, instead of to the list. But I see now that this may not have been the case. I can see, in fact, that Trey's original post "Two versions of evolution installed" was made on the 29th of April. Although it seems that the first mail server in the virus-mail's headers is 1c-astor.ru ([213.247.207.67]), it doesn't seem that one can identify from the headers in genuine list-postings who uses this server or Outlook Distress (surely the mail-client responsible?). I guess the Gentoo mail server cuts originating headers out. >From a friend's previous experience, I think it's quite possible that the culprit is not the OP (although I'm cc'ing him anyway). ISTR that this virus picks up an old message from a mail folder & sends it out again, having falsified the from: header. Could all members of the list using M$ mail-clients please check themselves..? Stroller. -- Enjoyed this post? Thanks for reading - please consider employing me! Technical support / system administration - CV available on request Linux / Unix / Windows / Mac OS X - UK or anywhere considered -- [EMAIL PROTECTED] mailing list
