[W1SMH] Additional info about virus!!!

Tue, 30 Sep 2003 21:48:49 -0400

In addition to the message I just sent about the virus going around, I
have identified that the person who is actually sending the virus is a
Comcast.net user and the name of their PC is "NEW."  I know this by
looking at the headers below.  The mail is appearing to come from Bruce
N1OFC, but it's not really from him.  Don't be fooled as I initially was
when I received (4) copies of a virus from his email address.

Received: from IP-216-37-46-9.colo.corplink.net (216.37.46.9)

            by mail01c.rapidsite.net (RS ver 1.0.86vs) with SMTP id
2-021187177

            for <[email protected]>; Tue, 30 Sep 2003 20:12:57 -0400
(EDT)

Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net
[204.127.198.35])

            by xlate1.mailsvcs.arrl.net (8.11.6/8.11.0) with ESMTP id
h910Cw306545

            for <[email protected]>; Tue, 30 Sep 2003 19:12:59 -0500

Message-Id: <[email protected]>

Date: Wed, 1 Oct 2003 00:12:54 +0000 (GMT)

X-Comment: Sending client does not conform to RFC822 minimum
requirements

X-Comment: Date has been added by Maillennium.

Received: from new (h0050da2c7079.ne.client2.attbi.com[24.61.102.151])

          by comcast.net (rwcrmhc11) with SMTP

          id <2003100100125201300mlnn8e>; Wed, 1 Oct 2003 00:12:53 +0000

From: "brb1217"<[email protected]>

To: [email protected]

Subject: Re:Binladen_Sexy.jpg

Reply-To: [email protected]

MIME-Version: 1.0

Content-type: multipart/mixed; boundary="#BOUNDARY#"

X-Loop-Detect:1

Status:   

=============================

Clayton L. Coleman - Attleboro, MA

Home Page http://www.c-n-j.net

Radio Page http://www.qsl.net/kb5tbb

=============================

--- StripMime Report -- processed MIME parts ---
multipart/alternative
  text/plain (text body -- kept)
  text/html
The reason this message is shown is because the post was in HTML
or had an attachment.  Attachments are not allowed.  To learn how
to post in Plain-Text go to: http://www.expita.com/nomime.html  ---