Don,
Looks to me like MIKE.org might be your culprit...from your Yahoo info
below. Burgess ID'd him a while back. I don't know much about how the virus
works through addresses. But, this one has been consistent for some time.
>Received: from MIKE.org (bdsl.66.13.216.137.gte.net [66.13.216.137])
by conch.msen.com (8.12.10/8.12.10) with SMTP id i7KGdwvX015988
Maybe John can check out the Shoptalk list and see if he's active.
Bernie
Writeto: [EMAIL PROTECTED]
----- Original Message -----
From: "Don M" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, August 20, 2004 5:20 PM
Subject: Re: ShopTalk: Re:
> I'm getting them repeatedly from MYKEY and the other one. Today's were
> scanned as containing the Beagle virus. I just signed up to ST a week or
> two ago after a long absence, and started getting these immediately. So
> some current member's PC is doing it. It's not some long lost thing thing
> here. Someone on the list is sending out a virus!
>
> -Don M
>
> Here are the Headers of Yahoo's email cleansing process :
>
> To: ShopTalk <[EMAIL PROTECTED]>
> Subject: "Alert: Virus Detected but not Cleaned - Attachment Removed"
> [ShopTalk: Re:]
>
> "Yahoo! Mail Virus Protection detected the virus '"[EMAIL PROTECTED]"' in
> the file '"Dog.zip"', attached to the enclosed email message. We scanned
> the file using Norton AntiVirus but were unable to clean it. Therefore, we
> removed the content of the attachment from the message. Please contact the
> message sender if you want to receive the attachment. They must clean the
> file and resend it before we can deliver it to you safely.
>
> "
>
> "Yahoo! Mail successfully cleans most infected attachments, which protects
> you from viruses.
> "
> X-Apparently-To: [EMAIL PROTECTED] via 216.136.174.218; Fri, 20 Aug 2004
> 09:55:40 -0700
> X-Originating-IP: [148.59.19.5]
> Return-Path: <[EMAIL PROTECTED]>
> Received: from 148.59.19.5 (EHLO conch.msen.com) (148.59.19.5)
> by mta106.biz.mail.re2.yahoo.com with SMTP; Fri, 20 Aug 2004
09:55:40 -0700
> Received: from conch.msen.com ([EMAIL PROTECTED] [127.0.0.1])
> by conch.msen.com (8.12.10/8.12.10) with ESMTP id i7KGe6vW016017;
> Fri, 20 Aug 2004 12:40:06 -0400 (EDT)
> Received: (from [EMAIL PROTECTED])
> by conch.msen.com (8.12.10/8.12.7/Submit) id i7KGe6V6016016;
> Fri, 20 Aug 2004 12:40:06 -0400 (EDT)
> Received: from MIKE.org (bdsl.66.13.216.137.gte.net [66.13.216.137])
> by conch.msen.com (8.12.10/8.12.10) with SMTP id i7KGdwvX015988
> for <[EMAIL PROTECTED]>; Fri, 20 Aug 2004 12:39:59 -0400
(EDT)
> Date: Fri, 20 Aug 2004 09:21:53 -0800
> To: "ShopTalk" <[EMAIL PROTECTED]>
> From: "MYKEYGOLF" <[EMAIL PROTECTED]>
> Subject: ShopTalk: Re:
> Message-ID: <[EMAIL PROTECTED]>
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
>
>
>
>
>
>
> Brad Smith wrote:
> >I keep getting messages like this with MYKEY being shown as the
> >sender. The Fish.exe shows as an attachment of 21.7 KB size. I don't
> >ever open them because I'm afraid they might be viruses. Can someone
> >more knowledgeable about this explain what they are.
> >
> >thanks,
> >Brad
> >
>
>
>
>
