viruses

Sun Jul 11 08:56:13 2004

Wayne,

Was its subject line "Nervous_illnesses.scr"?

Did it come NOT from austin-ghetto-list@pairlist.net
but from austin-ghetto-list-administrator@pairlist.net ?

If so, your computer apparently sent a virus to AGL
and it was bounced back to you automatically.

Look at the following text which I just grabbed from
yesterday's AGL archive (I am leaving in the first
few lines of the actual virus):

>From austin-ghetto-list@pairlist.net  Sat Jul 10 01:14:49 2004
From: austin-ghetto-list@pairlist.net (Cadaobh)
Date: Sat Jul 10 00:14:49 2004
Subject: Document
Message-ID: <foropuiynozxsjyfvcp@pairlist.net>

----------xbnwspekpdymmyhyuzes
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit

<html><body>
 <br>
</body></html>

----------xbnwspekpdymmyhyuzes
Content-Type: application/octet-stream; name="Nervous_illnesses.scr"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Nervous_illnesses.scr"

TVoAAAEAAAACAAAA//8AAEAAAAAAAAAAQAAAAAAAAAC0TM0hAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAkAAAAKkm3RPtR7NA7UezQO1Hs0DtR7NA7kezQGNYoEBtR7NAEWehQOxHs0AqQbVA
7EezQFJpY2jtR7NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUEUAAEwBAwDMD5BAAAAAAAAA
AADgAA8BCwEFDABQAAAAEAAAAJAAAPDiAAAAoAAAAPAAAAAAQAAAEAAAAAIAAAQAAAAAAAAA
BAAAAAAAAAAAAAEAABAAAAAAAAACAAAAAAAQAAAQAAAAABAAABAAAAAAAAAQAAAAAAAAAAAA

You can see that the virus came from Cadaobh and was sent yesterday,
Saturday, at 1.14pm. I'll bet your computer was on then and connected 
to the Internet.

Like Harry, you probably didn't notice the extra word administrator
in the return address.

And, like Harry when his machine sent out a virus, you were the 
only one to receive it as a bounce back to you from the virus detecting
software at pairlist.net. No one else saw this virus. Right, gang?

You can look at the AGL archives for yesterday with this link:

http://www.pairlist.net/pipermail/austin-ghetto-list/20040710.txt

Or any other date by changing 20040710 to the date you want.

Mike

----- Original Message ----- 
From: "Wayne Johnson" <cadaobh@shentel.net>
To: <austin-ghetto-list@pairlist.net>
Cc: "Ghetto List" <austin-ghetto-list@pairlist.net>
Sent: Saturday, July 10, 2004 6:26 PM
Subject: Re: viruses

> My local ISP virus y spamo blocker just knocked off a 29K+ thingy from
> A-G-L.
> 
> Hmmmmm.
.