****** READ ME FIRST PH LIST VIRUS ? ******* (Joe Boyle)

[Joe Boyle]

it looks like you are right Gregory, I just got a second email, again from
'Bob', but this time a different virus. Fortunately, Mcafee is cleaning them
up for me.

Is anyone else on the list affected ?

Many apologies to the true BD.

Regards, Joe.

-----Original Message-----
From: powerh-l-admin@lists.sowder.com
[mailto:powerh-l-admin@lists.sowder.com] On Behalf Of Gregory Provost
Sent: 09 January 2005 14:48
To: powerh-l@lists.sowder.com
Subject: ****** READ ME FIRST PH LIST VIRUS ? ******* (Joe Boyle)

Joe,

I'd be willing to bet money that the message in
question didn't actually come from Bob Deskin. I'm
pretty certain that Cognos, like most large companies,
scans incoming as well as outgoing messages for
viruses. It probably came from a third party, which
has both of your addresses in their address book. This
third party is probably using Outlook or Outlook
Express and has likely been infected with a virus or
trojan that turns their PC into a zombie to forward
spoofed messages from one contact to another. They
usually conceal the real address of the sender to make
it harder for the recipient to determine the actual
sender. Check the headers of the message to see if you
can obtain the IP address of the true sender.

I once had a similar problem. I was receiving
identical e-mails with an attached virus almost every
day over a period of several weeks. I was able to
trace them back to an ISP in South Korea. I forwarded
the header information from several messages to the
abuse contact at the ISP and they soon stopped.

Good luck,

- Gregory Provost.

______________________________________________________________________ 
Post your free ad now! http://personals.yahoo.ca
= = = = = = = = = = = = = = = = = = = = = = = = = = = =
Mailing list: powerh-l@lists.sowder.com
Subscribe: "subscribe" in message body to powerh-l-request@lists.sowder.com
Unsubscribe: "unsubscribe <password>" in message body to
powerh-l-request@lists.sowder.com
http://lists.sowder.com/mailman/listinfo/powerh-l
This list is closed, thus to post to the list you must be a subscriber.