Return-Path: Received: (qmail 28866 invoked from network); 15 Feb 2002 13:49:45 -0000 Received: from unknown (HELO warrior.services.quay.plus.net) (212.159.14.227) by excalibur.plus.net with SMTP; 15 Feb 2002 13:49:45 -0000 X-Priority: 3 X-MSMail-Priority: Normal Received: (qmail 15904 invoked from network); 15 Feb 2002 13:49:43 -0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Received: from unknown (HELO post.thorcom.com) (212.172.148.70) by warrior.services.quay.plus.net with SMTP; 15 Feb 2002 13:49:43 -0000 Received: from majordom by post.thorcom.com with local (Exim 3.33 #2) id 16bih2-0002D3-00 for rsgb_lf_group-outgoing@blacksheep.org; Fri, 15 Feb 2002 13:46:28 +0000 Received: from imo-d07.mx.aol.com ([205.188.157.39]) by post.thorcom.com with esmtp (Exim 3.33 #2) id 16bih0-0002Cy-00 for rsgb_lf_group@blacksheep.org; Fri, 15 Feb 2002 13:46:27 +0000 Received: from DL4YHF@aol.com by imo-d07.mx.aol.com (mail_out_v32.5.) id l.23.194a89f5 (4231) for ; Fri, 15 Feb 2002 08:45:00 -0500 (EST) From: DL4YHF@aol.com Message-ID: <23.194a89f5.299e6adc@aol.com> Date: Fri, 15 Feb 2002 08:45:00 EST Subject: LF: Re: Virus ? To: rsgb_lf_group@blacksheep.org MIME-Version: 1.0 Content-Type: text/html; charset=windows-1252 X-Mailer: AOL 6.0 for Windows XP DE sub 50 Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group Sender: Content-transfer-encoding: 8bit Hello Fabian and group,

Thanks for the warning. Fortunately my mail browser does not try to open an attachment in "preview mode" or similar.
I copied the attachment to a floppy disk and opened it with a text editor on an old DOS PC. Nothing spectacular in the code, only an email link with a strange hexadecimal 'data field' which may be suspicious. And an enormous lot of red tape from the 'Word' file format, though no obvious macros.

I guess it was just an accident sending that mail to the reflector - if 'Radim7' exists he may explain himself.

73 Wolf