Return-Path: <owner-rsgb_lf_group@blacksheep.org>
Received: (qmail 31275 invoked from network); 14 Feb 2003 15:05:06 -0000
Received: from warrior.services.quay.plus.net (212.159.14.227)  by mailstore with SMTP; 14 Feb 2003 15:05:06 -0000
Received: (qmail 7292 invoked from network); 14 Feb 2003 15:05:02 -0000
Received: from post.thorcom.com (193.82.116.70)  by warrior.services.quay.plus.net with SMTP; 14 Feb 2003 15:05:02 -0000
X-SQ: A
Received: from majordom by post.thorcom.com with local (Exim 4.12) id 18jhO6-00051o-00 for rsgb_lf_group-outgoing@blacksheep.org; Fri, 14 Feb 2003 15:04:26 +0000
Received: from [194.73.73.93] (helo=rhenium.btinternet.com) by post.thorcom.com with esmtp (Exim 4.12) id 18jhO5-00051f-00 for rsgb_lf_group@blacksheep.org; Fri, 14 Feb 2003 15:04:25 +0000
Received: from dial81-135-44-5.in-addr.btopenworld.com ([81.135.44.5] helo=Main) by rhenium.btinternet.com with smtp (Exim 3.22 #23) id 18jhO4-0007cd-00 for rsgb_lf_group@blacksheep.org; Fri, 14 Feb 2003 15:04:25 +0000
Message-ID: <002601c2d43a$82213040$6507a8c0@Main>
From: "Alan Melia" <Alan.Melia@btinternet.com>
To: rsgb_lf_group@blacksheep.org
References: <1c9.51955e0.2b7e51d2@aol.com>
Date: Fri, 14 Feb 2003 14:59:29 -0000
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Subject: LF: Re: Virus Warning: CLEZ found in zipped PIFattachment
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, hits=-0.3 required=6.0tests=QUOTED_EMAIL_TEXT,REFERENCES,SPAM_PHRASE_00_01,      USER_AGENT_OEversion=2.43
X-SA-Exim-Scanned: Yes
Sender: <owner-rsgb_lf_group@blacksheep.org>
Precedence: bulk
Reply-To: rsgb_lf_group@blacksheep.org
X-Listname: rsgb_lf_group
X-SA-Exim-Rcpt-To: rsgb_lf_group-outgoing@blacksheep.org
X-SA-Exim-Scanned: No; SAEximRunCond expanded to false

Hi Wolf, you are lucky you only got one !! I had 250 similar messages over a
36 hours period (2 different message bodies) all trapped by my ISPs new
facility. The suspicion was cast either on a German station and/or an
academic institution "richardson.uni2.ac"  was involved in both. They seem
to have stopped now. So either the sender is blacklisted or he has found out
about it. The virus was not Klez in this case but an earlier form.

Cheers de Alan G3NYK
alan.melia@btinternet.com

----- Original Message -----
From: <DL4YHF@aol.com>
To: <rsgb_lf_group@blacksheep.org>
Sent: 14 February 2003 14:06
Subject: LF: Virus Warning: CLEZ found in zipped PIFattachment


> Dear group,
>
> I received a mail today with a *.PIF file attachment which contained the
CLEZ
> virus.
> Fortunately, due to NOT USING MS Outlook here, no harm was produced, and
the
> anti virus software alerted me immediately.
>
> The sender of the infected mail claimed to be "dl4yhf@aol.com" which is
> definitely not true. Maybe someone's PC with my address in the address
list
> is infected so be alert.
>
> The mail itself did not have any text body, and the title was "Don't drink
so
> much beer" or something like that.
>
> Regards,
>   Wolf  DL4YHF.
>