[pchelpers] virus attack

Here is the first virus I have seen that uses such a return and subject as to 
make any unwary email user open the attachement.  I hope none of you ever open 
an attachement from any email without a disclaimer and from someone you trust.  
Here is the complete header of the email I got.
Bob Weyer


--------------------------------------------------------------------------------

eturn-Path: <abuse@xxxxxx>
Delivered-To: rweyer@xxxxxxxxx
Received: from 127.0.0.1 (mail.cell1amarillo.net [127.0.0.1])
 by dummy.domain.name (Postfix) with SMTP id 61F6128C564
 for <rweyer@xxxxxxxxx>; Wed, 31 Mar 2004 10:59:21 -0600 (CST)
Received: from mail.bigfoot.com (mail-kr.bigfoot.com [211.115.216.226])
 by mail.cell1amarillo.net (Postfix) with SMTP id A82BA28C794
 for <rweyer@xxxxxxxxx>; Wed, 31 Mar 2004 10:38:53 -0600 (CST)
Received: from bigfoot.com ([66.169.152.149])
 by BFLITEMAIL-KR3.bigfoot.com (LiteMail v3.03(BFLITEMAIL-KR3)) with SMTP id 
0403311131_BFLITEMAIL-KR3_308907_144912461;
 Wed, 31 Mar 2004 11:44:02 -0500 EST
From: abuse@xxxxxx
To: (private)@bigfoot.com
Subject: Internet Provider Abuse
Date: Wed, 31 Mar 2004 10:39:00 -0600
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <20040331163854.A82BA28C794@xxxxxxxxxxxxxxxxxxxxxx>
Status:  O

This is a multi-part message in MIME format.

------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain;
 charset="Windows-1252"
Content-Transfer-Encoding: 7bit

You have visited illegal websites.
I have a big list of the websites you surfed.


------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: application/octet-stream;
 name="warn.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="warn.txt"
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at http://www.freelists.org/cgi-bin/lsg2.cgi
List archives at http://www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Good advice is like good paint- it only works if applied.

Other related posts: