You may be right but I thought I should warn everyone. I'll forward the
complete message to you directly along with the expanded headers. Maybe you
can figure out where it came from.
Joe
At 04:30 PM 6/17/04 -0400, you wrote:
I just got the message below from my ISP (Road
Runner). It appears
that a message from the CC List contained Zafi.B worm.
This is correct - it *appears* so. It is, however, just an appearance;
practically all of the viral infection attempts these days forge the
from-lines, and I see no reason to think this is anything else. (Check
the Received: headers - I feel sure you'll see that it never actually
went anywhere near the machines that all list mail passes through.)
/~\ The ASCII der Mouse
\ / Ribbon Campaign
X Against HTML mouse(a)rodents.montreal.qc.ca
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B