[Hallicrafters] Notice to Duane Fischer

[rdhalste]

Please note: I have edited out all the cross posting as I do not subscribe
to those other groups and all that would happen is me receiving a bunch of
bounce messages.

I received a notice of the "Snowy Saturday HCI Saturday 40 Meter Net from
dfischer at usol.com but no virus. It just was a repeat or a repeat, of the
original post and had a "whole bunch" of headers included, which made is
longer than this run on sentence.  It is the only messages I've received
from that address.

I never did receive the warning message from Duane which is partially quoted
at the bottom. On the other hand, I was rebuilding this thing last night and
most of the e-mail went to one of the other computers and was "flushed".

I checked the message and it went through three relays.

A "whois" search on both 24.233.67.192 and 208.229.215.81 turns up Braitree
Electric Light Department BELD-DOCSIS1

"I believe" 64.238.2.60 appears to be the host for this list.

My guess would be that some one did get a virus and it is making up
addresses based on an address book...not all would be valid addresses.  Then
again, it could be some one playing. The odds are on the virus though.

The complete headers follow for those interested:

Begin Headers

Received: from mailman.qth.net (unverified [64.238.2.60]) by
mercurymail.tm.net
 (Vircom SMTPRS 1.4.232) with ESMTP id <My ISP> for <Me>;
 Sat, 25 Jan 2003 12:25:58 -0500
Received: from mailman.qth.net (mailman.qth.net [64.238.2.60])
 by mailman.qth.net (Postfix) with ESMTP
 id 973F332893B; Sat, 25 Jan 2003 12:27:02 -0500 (EST)
Delivered-To: hallicrafters at mailman.qth.net
Received: from ns1.beld.net (ns1.beld.net [208.229.215.81])
 by mailman.qth.net (Postfix) with ESMTP id E82EB3281AD
 for <hallicrafters at mailman.qth.net>; Sat, 25 Jan 2003 12:26:22 -0500 (EST)
Received: from S0027488913 (dhcp-0-3-47-ff-af-62.cpe.beld.net
[24.233.67.192])
 by ns1.beld.net (Postfix) with SMTP id 6F5F63B8EA
 for <hallicrafters at mailman.qth.net>; Sat, 25 Jan 2003 12:23:43 -0500 (EST)

End Headers:



Roger Halstead (K8RI, EN73 & ARRL Life Member)
N833R, World's Oldest Debonair? (S# CD-2)
www.rogerhalstead.com


----- Original Message -----
From: "Ray V." <w2ec at attglobal.net>
To: "List-Hallicrafters" <Hallicrafters at mailman.qth.net>; "List-Hammarlund"
<Hammarlund at mailman.qth.net>; "List-Heathkit" <Heathkit at mailman.qth.net>
Sent: Sunday, January 26, 2003 10:38 AM
Subject: [Hallicrafters] Notice to Duane Fischer


>   > If any of you receive mail from "dfischer at usol.com' in the 'from'
>   > field, kill it! That is not my 'from' field, it is somebody somewhere
>   > sending a virus.
>   >
>   > Duane W8DBF
>
> Duane, yesterday we received a bunch of the above notices, not to accept
> anything from "dfischer at usol.com" because they were a virus. Just wanted
> to let you know I'm still getting many messages with the from line
> "dfischer at usol.com" and am immediately killing the messages as you
> suggested. I guess I'll have to filter out "dfischer at usol.com" to make
> it easier. Have you tracked down the character who is using the
> "dfischer at usol.com" e-mail address yet to send out a virus?
>
> 73, Ray W2EC
>
>
> _______________________________________________
> List Administrator: Duane Fischer, W8DBF **for assistance**
> dfischer at usol.com
> ----
> Hallicrafters Collectors International: http://www.w9wze.org
> ----
> http://mailman.qth.net/mailman/listinfo/hallicrafters
>