There is a virus / worm going around. Among other things, you can spot it
because it seems to replace the sender in the "Reply To:" with one starting
with an underscore. At least two of them appropriated subjects related
to messages I posted on ClassicCmp -- one referring to the PDP/11-24 power
supply stuff and another relating to TU10's.
Norton AV on my machine caught messages with it on my way in, and said:
is infected with the W32.Badtrans.B_at_mm virus.
The Symantec page
http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b_at_mm.html
has information on it.
"The worm writes email addresses to the %System%\Protocol.dll file to
prevent multiple emails to the same person. Additionally, the sender's
email address will have the "_" character prepended to it, to prevent
replying to infected mails to warn the sender (eg user_at_website.com becomes
_user_at_website.com)."
Jay
At 01:16 AM 11/29/2001 +0000, you wrote:
> > > it titled in re: something they previously posted. I guess we have a
> second
> > > reason to be upset with Mr. (or Ms.) Ring: s/he didn't read at least
> one of
> > > our brilliant email posts.
> >
> > To top it all, I just got a copy from
> > John R. Keys Jr. <_jrkeys_at_concentric.net> !!
>
>As have I, apparently replying to a message that I just posted. It's now
>in the bit bucket...
>
>-tony
---
Jay R. Jaeger The Computer Collection
cube1_at_home.com visit
http://members.home.net/thecomputercollection
Received on Wed Nov 28 2001 - 20:54:35 GMT