-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 14 May 2003 10:17 pm, leslie wrote:
>  Paul Edwards ([log in to unmask]) wrote:
> : I just received an email with a virus that NAV caught and quarantined.
> : The address list has a lot of HP3000-L names on it. The headers are
> : listed below. Watch out!!

As a guess, I'd say the names were harvested from the newsgroup that mirrors
this list -- for various reasons, I've set my "newsgroup" identity to
"[log in to unmask]", and sure enough that one appears in the list.  Admittedly, a
completely bogus/munged address such as that could be fairly commonplace, but
a ubiquitous "google search" only turned up 4 pages in general [and all were
references to "[log in to unmask]" -- note the lack of a dot between "y" and "z"].
Switching to "groups" view turned up roughly 3000 hits, but remember, this is
a "message-by-message" count -- adding the name "tom" to the search brought
this down to 55, and I actually recognize these as my posts...]

it is purported to be from "Troy Cruthirds" with an internet "user" name of
"prosails" -- seems I recall a post or two from someone who's .sig implies a
love of sailing and/or as a seller of marine equipment [though this may be
confused from another list...] but I take that "with a grain of salt" --
forging the "from" name as a way of hiding one's tracks is a pretty old
viral/trojan trick...

- --
Yet another Blog: http://osnut.homelinux.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)
Comment: http://osnut.homelinux.net/TomEmerson.asc

iD8DBQE+wzRUV/YHUqq2SwsRAjx5AKChqFU6Lq1gHdTZePaOGTWBaf6SjwCdGNiI
vpH16MDMLJpBUhYvCgACw4E=
=JHD4
-----END PGP SIGNATURE-----

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *