Probably nothing to be done with the headers. Almost all of the newer
virii/worms forge their email headers. They will pick one email address out
of the address book on the contaminated computer to use as a source address.
And then it will send itself to everyone in the rest of the address book.
The result is that all that you can really say is that someone (whom you
probably know) has a contaminated computer and has both yourself and Margie
in their address book. It could very easily be someone in the project( or
not) and either way they are not doing it on purpose, they simply failed to
protect their computer.
Bill
----- Original Message -----
From: "ed gordon" <edeye1(a)hotmail.com>
To: <GAGEN-L(a)rootsweb.com>
Sent: Monday, March 29, 2004 11:13 AM
Subject: Unidentified subject!
I just got the following email it says from Margie but I dont believe
she
would of sent such a thing to me just thought everyone needed to know in
case you get on too. Somebody smarter than me may be able to do something
with the header.
Ed
****************************************************************************
***
From : <margie(a)majorinternet.net>
Sent : Monday, March 29, 2004 6:18 AM
To : edeye1(a)hotmail.com
| | | Junk E-Mail | Inbox
Hotmail has permanently blocked the following potentially unsafe
attachment(s): qlvvumdagn.exe (11 KB) More Info...
MIME-Version: 1.0
Received: from user ([130.126.75.131]) by
mc2-f15.hotmail.com with
Microsoft
SMTPSVC(5.0.2195.6824); Sun, 28 Mar 2004 22:18:01 -0800
X-Message-Info: 6sSXyD95QpXMPOZxbBkL6M80zwYW9iUl
Message-ID: <kxjxgrlfxqylijdkmmm(a)majorinternet.net>
Return-Path: margie(a)majorinternet.net
X-OriginalArrivalTime: 29 Mar 2004 06:18:01.0512 (UTC)
FILETIME=[96881280:01C41555]
--------------------------------------------------------------------------
------
View E-mail Message Source
Content-Type: multipart/mixed; boundary="--------520331143218083"
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Type: application/x-msdownload; name="beogjasvmuo.exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="qlvvumdagn.exe"
Attachment : Hotmail has permanently blocked the following
potentially unsafe attachment(s): qlvvumdagn.exe (11 KB) More Info...
_________________________________________________________________
Get rid of annoying pop-up ads with the new MSN Toolbar - FREE!
http://toolbar.msn.com/go/onm00200414ave/direct/01/
==== GAGEN Mailing List ====
USGenWeb's motto is - Volunteers dedicated to free, on-line information.
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (
http://www.grisoft.com).
Version: 6.0.644 / Virus Database: 412 - Release Date: 3/26/2004