HISTARCH Archives

HISTORICAL ARCHAEOLOGY

HISTARCH@COMMUNITY.LSOFT.COM

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Carl Steen <[log in to unmask]>
Reply To:
HISTORICAL ARCHAEOLOGY <[log in to unmask]>
Date:
Wed, 21 Jul 2004 15:50:13 -0400
Content-Type:
text/plain
Parts/Attachments:
text/plain (43 lines)
In a message dated 7/21/2004 3:20:01 PM Eastern Daylight Time,
[log in to unmask] writes:
There are viruses floating around and this may not be a hoax.  I am attaching
info from our tech support.
Imogene

----Original Message-----
From: IT Helpdesk
Sent: Monday, July 19, 2004 4:17 PM
To: [log in to unmask]
Subject: ITHelp Alert - Potential Virus
Importance: High

Please be advised that some suspicious email is being received that is making
it past our virus scanning software.  It may appear to come from someone that
you know and may have a subject like, "MP3", "Music_MP3" or "Dog".  Whatever
the subject, the email will have a .zip attachment and the body of the message
will contain a "key" for opening the attachment.  Please DO NOT follow these
instructions - permanently delete the message or call ITHelp at 6300 for
instructions.  Please see the following website for more information:
http://vil.nai.com/vil/content/v_126798.htm

Thanks for your cooperation,
Don Grant

Information Technology Services Helpdesk
Phone: 740-6300 Website: http://it.mala.bc.ca/
When I got Anna's message a file called "substitute.txt" was attached. I
downloaded it and used a passive viewer to see what it said. This was the message:

  " The original document has been removed from this message.
    The document was removed because

        A VIRUS WAS DETECTED IN YOUR E-MAIL:         Found the
W32/Bagle.ai@MM virus !!!

    The name of the original document was New_MP3_Player.com

                                  - ASU Postmaster
                                    [log in to unmask] "

So it is real. Don't open attached files!

ATOM RSS1 RSS2