Jinx wrote: > > its made to look like a bounced message with a zip file attached titled > > readme.zip > > > > " The message contains Unicode characters....... > > I got that, but doc.zip, from somebody at aol.com or washington.edu > Went in the bin > > Apparently it's a SoBig variant, made the 8pm radio news here. Two > payloads - one to forward the virus and one to enable remote access > I got one today too, and a reverse DNS on the IP gave 3dtee.apl.washington.edu. So if anyone at the Applied Physics Lab at Washington University reads this, be more careful next time. The sysadmin there said he would scan the computer first thing Tuesday morning, so hopefully the problem will be taken care of quickly. Was the one you received sent from 128.95.148.34? Oddly, the "error message" I received was just a long mix of random characters, rather than anything intelligible or even alphabetic. I'm nto sure what to think of that. -- http://www.piclist.com hint: PICList Posts must start with ONE topic: [PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads