Return-Path: Received: (qmail 31275 invoked from network); 14 Feb 2003 15:05:06 -0000 Received: from warrior.services.quay.plus.net (212.159.14.227) by mailstore with SMTP; 14 Feb 2003 15:05:06 -0000 Received: (qmail 7292 invoked from network); 14 Feb 2003 15:05:02 -0000 Received: from post.thorcom.com (193.82.116.70) by warrior.services.quay.plus.net with SMTP; 14 Feb 2003 15:05:02 -0000 X-SQ: A Received: from majordom by post.thorcom.com with local (Exim 4.12) id 18jhO6-00051o-00 for rsgb_lf_group-outgoing@blacksheep.org; Fri, 14 Feb 2003 15:04:26 +0000 Received: from [194.73.73.93] (helo=rhenium.btinternet.com) by post.thorcom.com with esmtp (Exim 4.12) id 18jhO5-00051f-00 for rsgb_lf_group@blacksheep.org; Fri, 14 Feb 2003 15:04:25 +0000 Received: from dial81-135-44-5.in-addr.btopenworld.com ([81.135.44.5] helo=Main) by rhenium.btinternet.com with smtp (Exim 3.22 #23) id 18jhO4-0007cd-00 for rsgb_lf_group@blacksheep.org; Fri, 14 Feb 2003 15:04:25 +0000 Message-ID: <002601c2d43a$82213040$6507a8c0@Main> From: "Alan Melia" To: rsgb_lf_group@blacksheep.org References: <1c9.51955e0.2b7e51d2@aol.com> Date: Fri, 14 Feb 2003 14:59:29 -0000 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Subject: LF: Re: Virus Warning: CLEZ found in zipped PIFattachment Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Status: No, hits=-0.3 required=6.0tests=QUOTED_EMAIL_TEXT,REFERENCES,SPAM_PHRASE_00_01, USER_AGENT_OEversion=2.43 X-SA-Exim-Scanned: Yes Sender: Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group X-SA-Exim-Rcpt-To: rsgb_lf_group-outgoing@blacksheep.org X-SA-Exim-Scanned: No; SAEximRunCond expanded to false Hi Wolf, you are lucky you only got one !! I had 250 similar messages over a 36 hours period (2 different message bodies) all trapped by my ISPs new facility. The suspicion was cast either on a German station and/or an academic institution "richardson.uni2.ac" was involved in both. They seem to have stopped now. So either the sender is blacklisted or he has found out about it. The virus was not Klez in this case but an earlier form. Cheers de Alan G3NYK alan.melia@btinternet.com ----- Original Message ----- From: To: Sent: 14 February 2003 14:06 Subject: LF: Virus Warning: CLEZ found in zipped PIFattachment > Dear group, > > I received a mail today with a *.PIF file attachment which contained the CLEZ > virus. > Fortunately, due to NOT USING MS Outlook here, no harm was produced, and the > anti virus software alerted me immediately. > > The sender of the infected mail claimed to be "dl4yhf@aol.com" which is > definitely not true. Maybe someone's PC with my address in the address list > is infected so be alert. > > The mail itself did not have any text body, and the title was "Don't drink so > much beer" or something like that. > > Regards, > Wolf DL4YHF. >