Return-Path: Received: (qmail 11399 invoked from network); 31 Jul 2001 19:53:28 -0000 Received: from unknown (HELO murphys-inbound.services.quay.plus.net) (212.159.14.225) by excalibur-qfe1-smtp-plusnet.harl.plus.net with SMTP; 31 Jul 2001 19:53:28 -0000 Received: (qmail 24142 invoked from network); 31 Jul 2001 19:53:10 -0000 Received: from unknown (HELO post.thorcom.com) (212.172.148.70) by murphys with SMTP; 31 Jul 2001 19:53:10 -0000 Received: from majordom by post.thorcom.com with local (Exim 3.16 #2) id 15RfUL-0007TS-00 for rsgb_lf_group-outgoing@blacksheep.org; Tue, 31 Jul 2001 20:47:33 +0100 Received: from protactinium.btinternet.com ([194.73.73.176] helo=protactinium) by post.thorcom.com with esmtp (Exim 3.16 #2) id 15RfUK-0007TN-00 for rsgb_lf_group@blacksheep.org; Tue, 31 Jul 2001 20:47:32 +0100 Received: from [213.123.15.31] (helo=default) by protactinium with smtp (Exim 3.22 #9) id 15RfTf-0005R2-00 for rsgb_lf_group@blacksheep.org; Tue, 31 Jul 2001 20:46:52 +0100 Message-ID: <000301c119f9$0891ab80$1f0f7bd5@default> From: "Alan Melia" To: "LF-Group" Subject: LF: Alan infected ?? Date: Tue, 31 Jul 2001 20:42:12 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.5 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group Sender: Hi All, Brian CT1DRP reported a strange file with no subject but using a title I had previously used on a message to Brian as a filename, and appending the extensions .xls.bat. This was one of a batch of 4 messages sent sent on 30/7/01 at about 2200bst. I had had a strange email message in that session and opened it by mistake, but deleted it immediately without activating the attachment. I have run my virus checker with an updated data file, and show no contamination. I have mailed myself and the message arrived clean. No-one else has reported a problem..... so far. I will not send anyone mail with attachments except Rik ON4YD, and if needed I will check with the recipiant first. Double extensions on the attached file a a clear subject field seem to the the useful indicators as they were for several other worms. For Rik, the format and size of the messages is well known, and I think his firewall will trap most things. I hope I have not caused any of you problems. Please advise immediately if it looks as though I have missed something Tel 01473-623713 Cheers de Alan G3NYK Alan.Melia@btinternet.com