Return-Path: Received: (qmail 28349 invoked from network); 19 Jan 2001 16:30:08 -0000 Received: from unknown (HELO warrior-inbound.servers.plus.net) (212.159.14.227) by excalibur.plus.net with SMTP; 19 Jan 2001 16:30:08 -0000 Received: (qmail 25282 invoked from network); 19 Jan 2001 16:24:30 -0000 Received: from unknown (HELO post.thorcom.com) (212.172.148.70) by warrior with SMTP; 19 Jan 2001 16:24:30 -0000 Received: from majordom by post.thorcom.com with local (Exim 3.16 #1) id 14JeE8-00016Z-00 for rsgb_lf_group-outgoing@blacksheep.org; Fri, 19 Jan 2001 16:17:24 +0000 Received: from mta05-svc.ntlworld.com ([62.253.162.45]) by post.thorcom.com with esmtp (Exim 3.16 #1) id 14JeE7-00016U-00 for rsgb_lf_group@blacksheep.org; Fri, 19 Jan 2001 16:17:24 +0000 Received: from oemcomputer ([62.255.44.179]) by mta05-svc.ntlworld.com (InterMail vM.4.01.02.27 201-229-119-110) with SMTP id <20010119161708.HDZI18404.mta05-svc.ntlworld.com@oemcomputer> for ; Fri, 19 Jan 2001 16:17:08 +0000 Message-ID: <003301c08233$414ecc40$b32cff3e@oemcomputer> From: "Paul & Vanessa" To: rsgb_lf_group@blacksheep.org Subject: LF: Virus warning Date: Fri, 19 Jan 2001 16:16:40 -0000 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group Sender: Hi all, It seems that PrettyPark is a genuine (but old) infection. Anything with "prettypark" in the subject line or an attachment "PrettyPark.exe" is suspect. Curious thing is that the "wobbler" hoax is itself propagated by a relatively innocuous worm, which causes the warning about the California message to be displayed. So how did this get associated with the other two warnings? Regards Paul G4MD E-mail Paul :- slowpoke@ntlworld.com