Klarinet Archive - Posting 000806.txt from 2000/12

From: "Ian Black" <clarinet1@-----.uk>
Subj: Re: [kl] weird mail
Date: Thu, 14 Dec 2000 19:48:31 -0500

We had a lot of virus traffic on the SAS-L SAS(r) discussion forum all originating from email
hahaha@-----. The
attachments were either *.exe or *.scr files (programs or screensavers) and each had the same virus.
These messages were intercepted by the firewall at work, and so I never actually saw the contents.
Needless to say this address is in my kill file at work.

My question for Mark is how to tell the originating server. What part of the mail headers tell you
who to report this cr=p to?

Ian

----- Original Message -----
From: Mark Charette <charette@-----.org>
Subject: Re: [kl] weird mail

> I, too, have been getting a lot of junk mail from a machine that I identified as being in Oz
(Australia). _DO NOT_ open the attachmenst under any circumstance! Every blessed one has been a
variant of the same virus.
>
> I have emailed the postmaster at that machine. I will notify the cognizant domain holder if I
receive any more.
>
> Mark C.

---------------------------------------------------------------------
Unsubscribe from Klarinet, e-mail: klarinet-unsubscribe@-----.org
Subscribe to the Digest: klarinet-digest-subscribe@-----.org
Additional commands: klarinet-help@-----.org
Other problems: klarinet-owner@-----.org