> I have been getting about 150 emails a day from the virus > and not one email was from anybody that I know I've just received my first suspicious attachment in a long long time, and happen to know the From "sender" very well indeed (allegedly myself via PIClist). It's based on a 5 month old post I don't see my own posts so it stood out like the dog's proverbials. I'm sure this machine isn't infected and that the mail is a concoction of real and bogus info In my Attached folder it says From : Jinx To : whereas legitimate list attachments show eg From : Jon Jenkins To : piclist@mitvma.mit.edu which is another giveaway =========================================== This is what shows in Properties - Return Path is not me and is a definite "cooties" indicator Return-path: Received: from fep7 (mx1.clear.net.nz [203.97.33.28]) by local-daemon (CLEAR Net Mail) with ESMTP id <0HK600F5WQ3RKU@local-daemon> for joecolquitt@ims-ms-daemon; Tue, 26 Aug 2003 05:04:40 +1200 (NZST) Received: from dartagnan.telusquebec.com (dartagnan.telusquebec.com [142.169.1.123]) by mx1.clear.net.nz (CLEAR Net Mail) with ESMTP id <0HK60008MQ3PTK@mx1.clear.net.nz> for joecolquitt@CLEAR.NET.NZ; Tue, 26 Aug 2003 05:04:39 +1200 (NZST) Received: from DURON950 (ts1-1318.f1783.globetrotter.net [142.169.111.123]) by smtp.globetrotter.net (iPlanet Messaging Server 5.2) with SMTP id <0HK600IE6Q1GOL@"TELUS Quebec">; Mon, 25 Aug 2003 13:04:33 -0400 (EDT) Date: Mon, 25 Aug 2003 13:04:09 -0400 (EDT) Date-warning: Date header was inserted by smtp.globetrotter.net From: Jinx Subject: [OT]:Must have been a very special phone X-Envelope-To: joecolquitt@CLEAR.NET.NZ Message-id: <0HK60008OQ3QTK@mx1.clear.net.nz> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_1gcQYxEhKI5njyS0VDxafg)" Original-recipient: rfc822;joecolquitt@CLEAR.NET.NZ =================================== There's more if you pull it apart in Wordpad -------------------------------------------- From - Sun Mar 16 09:47:05 2003 Return-path: --Boundary_(ID_1gcQYxEhKI5njyS0VDxafg) Content-type: application/x-msdownload; name=fdimag15.zip.zlo Content-transfer-encoding: base64 Content-disposition: attachment; filename=fdimag15.zip.zlo tent-type: multipart/mixed; boundary="Boundary_(ID_1gcQYxEhKI5njyS0VDxafg)" Original-recipient: rfc822;joecolquitt@CLEAR.NET.NZ --Boundary_(ID_1gcQYxEhKI5njyS0VDxafg) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Too tragic to be funny......... http://www.reuters.com/newsArticle.jhtml?type=oddlyEnoughNews&storyID=238111 5 Kind of puts things in perspective -- http://www.piclist.com hint: The list server can filter out subtopics (like ads or off topics) for xxxDxx4xxxxxxx950 (ts1-1318.f1783.globetrotter.net [142.169.111.123]) by smtp.globetrotter.net (iPlanet Messaging Server 5.2) with SMTP id <0HK600IE6Q1GOL@"TELUS Quebec">; Mon, 25 Aug 2003 13:04:33 -0400 (EDT) Date: Mon, 25 Aug 2003 13:04:09 -0400 (EDT) Date-warning: Date header was inserted by smtp.globetrotter.net From: Jinx Subject: [OT]:Must have been a very special phone X-Envelope-To: joecolquitt@CLEAR.NET.NZ Message-id: <0HK60008OQ3QTK@mx1.clear.net.nz> MIME-version: 1.0 Return-path: Received: from fep7 (mx1.clear.net.nz [203.97.33.28]) by local-daemon (CLEAR Net Mail) with ESMTP id <0HK600F5WQ3RKU@local-daemon> for joecolquitt@ims-ms-daemon; Tue, 26 Aug 2003 05:04:40 +1200 (NZST) Received: from dartagnan.telusquebec.com (dartagnan.telusquebec.com [142.169.1.123]) by mx1.clear.net.nz (CLEAR Net Mail) with ESMTP id <0HK60008MQ3PTK@mx1.clear.net.nz> for joecolquitt@CLEAR.NET.NZ; Tue, 26 Aug 2003 05:04:39 +1200 (NZST) Received: from DUROd -- http://www.piclist.com hint: PICList Posts must start with ONE topic: [PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads