[ale] OT - Win virus received. Okay, who's the wise guy? ;-)

[Frank Zamenski]

Okay gang,

Pardon me, I'm running Winbloze NT tonight, and received a nasty in
my OE email. (Getting a lot of that lately.) Of course, when I get an
unsolicited Win exe, doc, scr, bat ad naseum in email from someone I
don't know (especially one containing W32/SirCamWorm at MM per
Norton and McAfee) I just trash it. Of course I scan from those I know
too. But in this case, the sender's name sounds vaguely familiar. Is he
in one of these lists? If so, I have to assume he doesn't know he caught a
bug and that his OE is sending out trash. Since I don't have all the nix
tools readily available tonight to do a decent tracking job, does anyone
care for the excersize? From my OE's header info:

------------------
Received: by pop3.mx.voyager.net (mbox fzamenski at voyager.net)
 (with voyager.net's vgrpop Tue Aug 14 22:40:14 2001)
Received: from mailgate.novagate.net (mailgate.novagate.net
[205.138.138.22])
 by mx13.mx.voyager.net (8.10.2/8.10.2) with ESMTP id f7F20iM39040
 for <fzamenski at voyager.net>; Tue, 14 Aug 2001 22:00:44 -0400 (EDT)
Received: from dave.gha.chartermi.net (013gra247.chartermi.net
[24.247.13.247])
 by mailgate.novagate.net (8.11.3/8.11.3) with SMTP id f7F20pf92830
 for <fzamenski at voyager.net>; Tue, 14 Aug 2001 22:00:51 -0400 (EDT)
 (envelope-from davieo at novagate.com)
Message-Id: <200108150200.f7F20pf92830 at mailgate.novagate.net>
From: "David Ohlendorf"<davieo at novagate.com>
To: ale at ale.org
To: fzamenski at voyager.net
Subject: =?ISO-8859-1?Q?420=5FW00?=
date: Tue, 14 Aug 2001 21:59:59 -0400
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Content-Type: multipart/mixed;
boundary="----6F403AA2_Outlook_Express_message_boundary"
Content-Disposition: Multipart message
Status: U

------6F403AA2_Outlook_Express_message_boundary
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: message text

Hi! How are you=3F

I send you this file in order to have your advice

See you later=2E Thanks

------6F403AA2_Outlook_Express_message_boundary
Content-Type: application/mixed; name=420_W00.SYL.doc.bat
Content-Transfer-Encoding: base64
Content-Disposition: attachment;  filename=420_W00.SYL.doc.bat

-----------

Have fun. (And David Ohlendorf, if you're here ol' buddy, you have
an issue! ;-)
-fgz


--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.