Tour of All Petite - virus warning!!!!

[John Petterson]

Marty,

It almost certainly did come through the list. The headers match up
correctly. It got through the 3 servers mx1b.mail.nsx.net,
vs.mail.nxs.net, and mail.nsx.net just like all the other emails that
hit the list.

If you know how to read the headers you can tell where the lie is. There
was no lie on this header. The system names and IP addresses matched
from end to end.

I have inserted the header from that email below. If you care to you can
go to http://help.mindspring.com/docs/006/emailheaders/ , there is a lot
of information about how to decode these email headers.  Also at
http://www.faqs.org/ , select STDs from the left column and enter 822 in
‘display rfc by number’ to get the full documentation about the headers.

I do understand spoofing. But it leaves traces if you know where to
look. They are not present here.

John

-----Original Message-----
From: Martin X. Moleski, SJ [mailto:moleski at canisius.edu] 
Sent: Saturday, October 05, 2002 11:45
To: rcpilotjohn at wideopenwest.com; discussion at nsrca.org
Subject: RE: Tour of All Petite - virus warning!!!!

--On Saturday, October 05, 2002 10:29 AM -0500 John Petterson
<rcpilotjohn at wideopenwest.com> wrote:

> Not sure what this email is about, but my antivirus 
> program is killing it.  Seems to be spreading, 
> this is the second copy form the list. 

It is not from the list.

It is from klez or bugbear.

When you understand what "spoofing" is, you 
will cease to accuse innocent bystanders of
sending you viruses.

Just because e-mail claims to be from
discussion at nsrca.org does not mean that
it is from discussion at nsrca.org.

Viruses/worms have learned how to lie.
Please don't fall for their tricks.

				Marty

========================================================================
====
Return-Path: <middletn at cfw.com>
Received: from smtp-1.wideopenwest.com ([172.18.1.1])
	by pop-2.dnv.wideopenwest.com (8.11.6/8.11.6) with ESMTP id
g95D4cq26059
	for <rcpilotjohn at wideopenwest.com>; Sat, 5 Oct 2002 07:04:38
-0600
Received: from mail.nxs.net (mail.nxs.net [198.144.160.60])
	by smtp-1.wideopenwest.com (8.11.6/8.11.6) with ESMTP id
g96D4bR09268
	for <rcpilotjohn at wideopenwest.com>; Sun, 6 Oct 2002 07:04:38
-0600
Received: from vs.mail.nxs.net (unverified [198.144.160.64]) by nxs.net
 (Rockliffe SMTPRA 5.2.4) with SMTP id <B0041375184 at mail.nxs.net> for
<discussion at nsrca.org>;
 Sat, 5 Oct 2002 09:04:39 -0400
Received: from mx1b.mail.nxs.net ([198.144.167.163])
 by vs.mail.nxs.net (NAVGW 2.5.2.12) with SMTP id M2002100508582528399
 for <discussion at nsrca.org>; Sat, 05 Oct 2002 08:58:25 -0400
Received: (qmail 16874 invoked from network); 5 Oct 2002 13:04:14 -0000
Received: from unknown (HELO mailout5-0.nyroc.rr.com) (24.92.226.169)
  by mx1b.mail.nxs.net with SMTP for <discussion at nsrca.org>; 5 Oct 2002
13:04:14 -0000
Received: from pentium800mhz (roc-66-67-163-231.rochester.rr.com
[66.67.163.231])
	by mailout5-0.nyroc.rr.com (8.11.6/RoadRunner 1.20) with SMTP id
g95D4Cp11962
	for <discussion at nsrca.org>; Sat, 5 Oct 2002 09:04:13 -0400 (EDT)
Message-ID: <009201c26c89$18546a60$6401a8c0 at rochester.rr.com>
From: "Del Rykert" <drykert at rochester.rr.com>
To: <discussion at nsrca.org>
References: <200210042051.g94KpFiM010351 at ens1.eatel.net>
Subject: Re: Tour of All Petite
Date: Sat, 5 Oct 2002 09:05:58 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_008F_01C26C4E.6B90DD20"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Reply-To: discussion at nsrca.org
Sender: discussion-request at nsrca.org
X-RAVMilter-Version: 8.3.3(snapshot 20020312) (smtp-1.wideopenwest.com)
X-UIDL: E]H"!5hV!!<:A!!2pF!!


==================# To be removed from this list, send a message to 
# discussion-request at nsrca.org
# and put leave discussion on the first line of the body.
#