[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Something very distrubing (Warning: DO Not Read Ernie Bonugli's Message)


  • To: omega-list@xxxxxxxxxx
  • Subject: Re: Something very distrubing (Warning: DO Not Read Ernie Bonugli's Message)
  • From: List Maintainer <jimo@xxxxxxxxxx>
  • Date: Wed, 17 Mar 2004 22:20:22 -0800

PureBytes Links

Trading Reference Links

On Wed, Mar 17, 2004 at 10:31:45PM -0500, hcarvas wrote:
> There is nothing more disturbing than what you see when you
> open Ernie Bonugli message.  The "Golden Palace Casio"
> installs on your PC without your consent.

There was no attachment in the message Ernie sent through the omega-list
with Subject: Something very distrubing, and
Message-ID: <1657952801.20040317172714@xxxxxxxx>

I suspect hcarvas received a virus from a third party that had forged
Ernie's name/address as its origin.  The recent viruses seem to all
do this forgery.  The best you can do to trace their real origin
is examine their Received: headers and find the origin IP address,
and a timestamp.  The giant ISP who owns that IP address block could
determine who had that address at that time, if they cared.  You can't.

You won't get the original author's Received headers for list traffic,
as the server strips them.  But on the other hand, you can rest assured
that you won't get any viruses through this list server.

Jim