Re: Worrisome email

["Jeff Hanvey" <jewahe -at- lycos -dot- co -dot- uk>]

I just received one, too...but no attachment came through (I'm at work, and
we use McAffee here). This is the second one I've received this week.

The actual email address is vkdjtq-ydetmsc -at- mQZkBneRqd -dot- com, which is
obviously invalid.

It seems to have come from  JWViI (D5769C1F.kabel.telenet.be
[213.118.156.31])

Someone's infected out there, and needs to fix it quick...the "Be" domain is
for Belguim.

Jeff Hanvey
Augusta, GA
jewahe -at- lycos -dot- co -dot- uk
http://www.jewahe.net

----- Original Message -----
From: "Sharon Burton-Hardin" <sharon -at- anthrobytes -dot- com>
To: "TECHWR-L" <techwr-l -at- lists -dot- raycomm -dot- com>
Sent: Tuesday, April 15, 2003 3:01 PM
Subject: Worrisome email


>
> I just got an email from what, at first glance, looks to be from the
> Microsoft Internet Security Section. It has an attachment they are urging
me
> to install as a cumulative patch for the month of April
>
> Looking at the header, this is from Rugosa -at- pandora -dot- be, which would NOT be
> from Microsoft at all. Obviously, this is a virus of some sort. And, the
> fact that I know that Microsoft does not send these things out this way is
> also a clue
>
> The scary thing is the attachment got thru intact. The latest updates in
my
> Norton did not strip this out. And I am updated with the latest virus
> definitions. I have seen previous ones get cleaned out but not this one
> Scary


^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Purchase RoboHelp X3 in April and receive a $100 mail-in 
rebate, plus FREE RoboScreenCapture and WebHelp Merge Module.  
Order here: http://www.ehelp.com/techwr-l/


   Help celebrate TECHWR-L's 10th Anniversary starting this month!
Check out the contests at http://www.raycomm.com/techwhirl/special/contests/
Happy birthday to you, happy birthday to you, happy birthday TECHWR-L....

---
You are currently subscribed to techwr-l as:
archive -at- raycomm -dot- com
To unsubscribe send a blank email to leave-techwr-l-obscured -at- lists -dot- raycomm -dot- com
Send administrative questions to ejray -at- raycomm -dot- com -dot-  Visit
http://www.raycomm.com/techwhirl/ for more resources and info.