> > Should we contact that author and let him
> > know he is infected, or simply remove him from the list?
>
> Probably remove him from the list, then inform him and ask to subscribe
> if he is still interested.
You need to be careful, the 'From:' in the mail is probably wrong,
so you need to check the IP address reported by the first (known) MTA.
I've been receiving a lot of bonce messages for this virus, and my
NetBSD system isn't compromised (I'm not actually running wine!)
David
--
David Laight: [EMAIL PROTECTED]
