Tour of All Petite - virus warning!!!!

[Martin X. Moleski, SJ]

John,

Here's my problem: I did not get the original of the Tour of
All Petite message.

I suppose that if it came through the list, all of us on the
list would get it.

If you are tracing John Peterson's WARNING about the
virus, yes, that did come through the list.  I reason
that this is the message you traced because of the
"Subject" line which reads: "Subject: Re: Tour of All Petite".

That message did not contain the virus.

						Marty



--On Saturday, October 05, 2002 11:16 PM -0500 John Petterson <rcpilotjohn at wideopenwest.com> wrote:

> Marty,
> 
> It almost certainly did come through the list. The headers match up
> correctly. It got through the 3 servers mx1b.mail.nsx.net,
> vs.mail.nxs.net, and mail.nsx.net just like all the other emails that
> hit the list.
> 
> If you know how to read the headers you can tell where the lie is. There
> was no lie on this header. The system names and IP addresses matched
> from end to end.
> 
> I have inserted the header from that email below. If you care to you can
> go to http://help.mindspring.com/docs/006/emailheaders/ , there is a lot
> of information about how to decode these email headers.  Also at
> http://www.faqs.org/ , select STDs from the left column and enter 822 in
> ?display rfc by number? to get the full documentation about the headers.
> 
> I do understand spoofing. But it leaves traces if you know where to
> look. They are not present here.
> 
> John
> 
> -----Original Message-----
> From: Martin X. Moleski, SJ [mailto:moleski at canisius.edu] 
> Sent: Saturday, October 05, 2002 11:45
> To: rcpilotjohn at wideopenwest.com; discussion at nsrca.org
> Subject: RE: Tour of All Petite - virus warning!!!!
> 
> --On Saturday, October 05, 2002 10:29 AM -0500 John Petterson
> <rcpilotjohn at wideopenwest.com> wrote:
> 
>> Not sure what this email is about, but my antivirus 
>> program is killing it.  Seems to be spreading, 
>> this is the second copy form the list. 
> 
> It is not from the list.
> 
> It is from klez or bugbear.
> 
> When you understand what "spoofing" is, you 
> will cease to accuse innocent bystanders of
> sending you viruses.
> 
> Just because e-mail claims to be from
> discussion at nsrca.org does not mean that
> it is from discussion at nsrca.org.
> 
> Viruses/worms have learned how to lie.
> Please don't fall for their tricks.
> 
> 				Marty
> 
> ========================================================================
> ====
> Return-Path: <middletn at cfw.com>
> Received: from smtp-1.wideopenwest.com ([172.18.1.1])
> 	by pop-2.dnv.wideopenwest.com (8.11.6/8.11.6) with ESMTP id
> g95D4cq26059
> 	for <rcpilotjohn at wideopenwest.com>; Sat, 5 Oct 2002 07:04:38
> -0600
> Received: from mail.nxs.net (mail.nxs.net [198.144.160.60])
> 	by smtp-1.wideopenwest.com (8.11.6/8.11.6) with ESMTP id
> g96D4bR09268
> 	for <rcpilotjohn at wideopenwest.com>; Sun, 6 Oct 2002 07:04:38
> -0600
> Received: from vs.mail.nxs.net (unverified [198.144.160.64]) by nxs.net
>  (Rockliffe SMTPRA 5.2.4) with SMTP id <B0041375184 at mail.nxs.net> for
> <discussion at nsrca.org>;
>  Sat, 5 Oct 2002 09:04:39 -0400
> Received: from mx1b.mail.nxs.net ([198.144.167.163])
>  by vs.mail.nxs.net (NAVGW 2.5.2.12) with SMTP id M2002100508582528399
>  for <discussion at nsrca.org>; Sat, 05 Oct 2002 08:58:25 -0400
> Received: (qmail 16874 invoked from network); 5 Oct 2002 13:04:14 -0000
> Received: from unknown (HELO mailout5-0.nyroc.rr.com) (24.92.226.169)
>   by mx1b.mail.nxs.net with SMTP for <discussion at nsrca.org>; 5 Oct 2002
> 13:04:14 -0000
> Received: from pentium800mhz (roc-66-67-163-231.rochester.rr.com
> [66.67.163.231])
> 	by mailout5-0.nyroc.rr.com (8.11.6/RoadRunner 1.20) with SMTP id
> g95D4Cp11962
> 	for <discussion at nsrca.org>; Sat, 5 Oct 2002 09:04:13 -0400 (EDT)
> Message-ID: <009201c26c89$18546a60$6401a8c0 at rochester.rr.com>
> From: "Del Rykert" <drykert at rochester.rr.com>
> To: <discussion at nsrca.org>
> References: <200210042051.g94KpFiM010351 at ens1.eatel.net>
> Subject: Re: Tour of All Petite
> Date: Sat, 5 Oct 2002 09:05:58 -0700
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> 	boundary="----=_NextPart_000_008F_01C26C4E.6B90DD20"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 5.50.4522.1200
> X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
> Reply-To: discussion at nsrca.org
> Sender: discussion-request at nsrca.org
> X-RAVMilter-Version: 8.3.3(snapshot 20020312) (smtp-1.wideopenwest.com)
> X-UIDL: E]H"!5hV!!<:A!!2pF!!
> 
> 


==================# To be removed from this list, send a message to 
# discussion-request at nsrca.org
# and put leave discussion on the first line of the body.
#