[Groop] Re: "Hi" Virus

[Denis Hackney]

Gary Grossmann wrote:
> ME wrote:
>> The other possibility is that the infected e-mail didn't come from
>> you.  As it says on the page I linked to at McAfee, the e-mail's
>> return address is often spoofed.

I think this might well be what happened here.

> We might be able to find out for sure if this happened if we could
> examine the header on the infected message.

It's still sitting in my Trash folder, so let's have a look...
Ah, yes.  From the headers on Gary's virus email:

> Received:
> from a-2w54-fage (a-2w54-fage.univ-avignon.fr [194.57.177.88])

Apparently this email originally came from somewhere in France, which
kinda rules Gary out.  The headers on Gary's other emails look
completely different, too, so it's highly unlikely that the virus
email originated from Gary's computer.

Denis.
-- 
Denis Hackney - http://members.optusnet.com.au/~dhackney/