said: 
>  
>  
>>Rocky, 
>>Why did you send the list this file? 
>  
>  
> Why are you assuming Rocky sent this file?  Read up a bit on viruses and 
> learn they are propagated. 
>  
Because most e-mails that reach us on Scoug-Help seem to be from the  
person who is shown as the sender.  I just didn't think about the  
exception condition, although I should have, because Rocky's notes are  
not so cryptic.  Apologies to Rocky. 
I went back and looked at the full set of headers.  I found this on the  
earliest "Received" line: 
from maharashtra (61.17.92-143.ip-dsl-ngp.eth.net [61.17.92.143]) by  
scoug.com 
So, now I'm pretty sure that the "From:" name was spoofed, or whatever  
the term is. 
Now, why am I assuming that the note I'm replying to is from Steven? 
from user-vcaun6u.dsl.mindspring.com ([216.175.92.222] helo=slamain)	by  
pop-satin.atl.sa.earthlink.net with smtp (Exim 3.36 #10) 
(Does this prove anything?  At least I see "earthlink" in there.) 
And, while we're at it, how do I know that I sent the note attributed to me? 
from [192.168.1.100] (really [24.55.55.12]) by mta11.adelphia.net  
    (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP 
(I guess that is good; I haven't looked too hard before.  Again, I see  
my ISP named.) 
>  
>>After I saw Tom's reply, I was  
>>reluctant to save the file. 
>  
>  
> If you really don't understand what is going on, you really should have 
> your ISP doing virus scanning for you.  Sort of to protect you from 
> yourself. 
>  
There's some question whether I understand what's going on, no doubt. 
I just went to adelphia.net, logged in, and chose "My Account".  I'm  
pretty certain that I told adelphia.net to scan for Spam, but I cannot  
find that setting anywhere I look.  I also do not see a choice to have  
adelphia.net scan for viruses.  Looks like I'll have to use thier  
Support Chat feature. 
>  
>>On the other hand, I don't want to miss out  
>>on something cool.... 
>  
>  
> I am sure the virus author though he was being cool. 
>  
>  
>>I Google'd on eBook.PIF, and saw several mentions of a virus in  
>>connection with it. 
>  
>  
> Not surprising since the attachment is a virus. 
>  
> Steven 
>  
Colin (he of the red face) 
===================================================== 
To unsubscribe from this list, send an email message 
to "steward@scoug.com". In the body of the message, 
put the command "unsubscribe scoug-help". 
For problems, contact the list owner at 
"postmaster@scoug.com". 
===================================================== 
<< Previous Message << 
 >> Next Message >>
Return to [ 15 | 
February | 
2006 ]
The Southern California OS/2 User Group
P.O. Box 26904
Santa Ana, CA  92799-6904, USA
Copyright 2001 the Southern California OS/2 User Group.  ALL RIGHTS 
RESERVED. 
SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group.
OS/2, Workplace Shell, and IBM are registered trademarks of International 
Business Machines Corporation.
All other trademarks remain the property of their respective owners.