Return-Path: Received: (qmail 18354 invoked from network); 3 Mar 2004 11:46:09 -0000 Received: from unknown (HELO ptb-mxscan02.plus.net) (212.159.14.236) by ptb-mailstore03.plus.net with SMTP; 3 Mar 2004 11:46:09 -0000 Content-Transfer-Encoding: 8bit Received: (qmail 77138 invoked from network); 3 Mar 2004 11:46:08 -0000 X-Filtered-by: Plusnet (hmail v1.01) X-Priority: 3 X-MSMail-Priority: Normal X-Spam-detection-level: 11 Received: from ptb-mxcore02.plus.net (212.159.14.216) by ptb-mxscan02.plus.net with SMTP; 3 Mar 2004 11:46:06 -0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Received: from post.thorcom.com ([193.82.116.20]) by ptb-mxcore02.plus.net with esmtp (Exim) id 1AyUpC-000Jl7-OW for dave@picks.force9.co.uk; Wed, 03 Mar 2004 11:46:06 +0000 X-Fake-Domain: majordom Received: from majordom by post.thorcom.com with local (Exim 4.14) id 1AyUoj-00075t-UW for rs_out@blacksheep.org; Wed, 03 Mar 2004 11:45:37 +0000 Received: from [192.5.29.49] (helo=relay.dstl.gov.uk) by post.thorcom.com with smtp (Exim 4.14) id 1AyUoj-00075k-7D for rsgb_lf_group@blacksheep.org; Wed, 03 Mar 2004 11:45:37 +0000 Received: (qmail 16265 invoked from network); 3 Mar 2004 11:45:34 +0000 X-Fake-Domain: unknown Received: from unknown (HELO warlock.dstl.gov.uk) (192.5.29.10) by relay.dera.gov.uk with SMTP; 3 Mar 2004 11:45:34 +0000 Message-ID: <7D653C9C42F5D411A27C00508BF8803D01A9F47E@mail.dstl.gov.uk> From: "Talbot Andrew" To: rsgb_lf_group@blacksheep.org Date: Wed, 3 Mar 2004 11:45:30 -0000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2657.72) Subject: LF: RE: Re: Your software from G3XYM - virus ? Content-Type: text/plain; charset=iso-8859-1; format=flowed X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on post.thorcom.com X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=no version=2.63 X-SA-Exim-Scanned: Yes Sender: Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group X-SA-Exim-Rcpt-To: rs_out@blacksheep.org X-SA-Exim-Scanned: No; SAEximRunCond expanded to false X-PN-SPAMFiltered: yes X-Spam-Rating: 1 Think you're right. On my other non-firewall protected machine it tried to keep downloading even after I disconnected. Only stopped once I'd gone through task manager. File deleted untouched. I got an acknowledgement sent to this address a couple of days ago from someone I'd never heard of stating that an attachment was trapped out by their (firewall) - needless to say I'd never sent it. As this system has incredibly high levels of protection in it, could obviously not have been anything actually sent from here. Andy G4JNT -----Original Message----- From: Hugh M0WYE [mailto:m0wye@thersgb.net] Sent: 2004 March 03 11:32 To: rsgb_lf_group@blacksheep.org Subject: LF: Re: Your software from G3XYM - virus ? Hi All, The posting with the subject "Re: Your software", purporting to come from 'XYM looks a bit dodgy to me. There is no text in the E-mail and it contains a .pif attachment, which I think is some kind of executable. Forgive me if I'm wrong, but you can't be too careful these days. 73 Hugh M0WYE "This e-mail is intended for the recipient only. If you are not the intended recipient you must not use, disclose, distribute, copy, print, or rely upon this e-mail. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail." "Recipients should note that all e-mail traffic on MOD systems is subject to monitoring and auditing."