>The alleged sender's domain is "cherry.ease.lsoft.com"
>The domain sounds really familiar.

It's where the PICLIST comes from.   I looked up lsoft.com and
apparently they are the ones behind the trademarked LISTSERV.
I don't know the particulars but maybe their servers run the
lists for MIT.

> Each of these emails (100+ for the morning so far) has a .zip,
>.exe or .scr attachment.  :-(
>
>I've setup a filter to trash it automatically, but there must be a way to stop
>it before I download, right?
>-Neil.

There is a way, and it's not limited to Linux users.  Most email
clients allow you to set a maximum message size. Most useful mail
is less than 10k (and I'm being generous).  I use Eudora (not a
great help for Linux people) and set the limit to about 40K.  Of
course this "BlueSky" virus (that was sent to me, too) is only 29K,
but, like you, I'm more interested in the bandwidth aspects of
this stuff then worrying about my email program executing stuff
I don't ask it to.

Anyway, POP-driven email software can find out the message size
without downloading it, and can order it blown off the server
without retreiving it.

Barry

--
http://www.piclist.com hint: The PICList is archived three different
ways.  See http://www.piclist.com/#archives for details.