<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=Content-Type content="text/html; = charset=iso-8859-1"> <META content="MSHTML 6.00.2800.1170" name=GENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=#ffffff> <DIV><FONT face=Arial size=2>Sarah, we really didn't think that it = was coming directly from you, dear.. We covered this a few weeks ago, about how = just one of your messages on someone else's computer can make it appear to come from = you.  </FONT></DIV> <DIV><FONT face=Arial size=2></FONT> </DIV> <DIV><FONT face=Arial size=2>You're just fine with me, at = least.</FONT></DIV> <DIV><FONT face=Arial size=2>Kevin</FONT></DIV> <DIV><FONT face=Arial size=2></FONT> </DIV> <DIV><FONT face=Arial size=2>By the way, your viewpoint on the = matter is point-on, as usual.</FONT></DIV> <BLOCKQUOTE style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; = BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px"> <DIV style="FONT: 10pt arial">----- Original Message ----- </DIV> <DIV style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: = black"><B>From:</B> <A title=sarah@gendernet.org = href="mailto:sarah@gendernet.org">Sarah Fox</A> </DIV> <DIV style="FONT: 10pt arial"><B>To:</B> <A = title=pianotech@ptg.org href="mailto:pianotech@ptg.org">Pianotech</A> </DIV> <DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, June 23, 2003 = 6:35 PM</DIV> <DIV style="FONT: 10pt arial"><B>Subject:</B> Re: OT Virus: Not = I!</DIV> <DIV><BR></DIV>> Hi List,<BR>><BR>> My Mailwasher has just = detected a virus from Sarah Fox @ Goldrush.com,<BR>with<BR>> the subject "Key = leads and inertia"<BR><BR>Yikes!  I got it too.  Since I don't = often send emails to myself -- or to<BR>any of my other alter egos -- I treated = it with considerable suspicion and<BR>did not open the attachment.<BR><BR>My = computer is free of viruses, unless this is something not yet profiled = in<BR>the Norton/Symantec virus definitions.  The virus apparently came from<BR>someone else, as evidenced by the header (read in order from = the last<BR>"received" line to the first):<BR><BR>Return-path: <<A = href="mailto:sarah@goldrush.com">sarah@goldrush.com</A>><BR>Received= by etc., etc.  -- the normal route to my computer.  (I've omitted<BR>all but my reflector address because these messages get = archived, and I<BR>don't want to get spam through my primary = address!)<BR>Received: from mail.surferz.net (mail.surferz.net [64.80.52.17])<BR> by tnmx01.mgw.rr.com (8.12.8p1/8.12.8) with ESMTP id h5O0859h021846 for<BR> <A href="mailto:XXXXXX@XXXXXXX">XXXXXX@XXXXXXX</A>; = Mon, 23 Jun 2003 20:08:05 -0400 (EDT)<BR>Received: from sv.compuland.com.br (sv.compuland.com.br [200.255.96.21])<BR> by mail.surferz.net (8.12.6/8.12.6) with ESMTP id h5O05QOG025995 for<BR> <<A href="mailto:sarah@gendernet.org">sarah@gendernet.org</A>>; Mon, = 23 Jun 2003 20:05:27 -0400 (EDT)<BR>Received: from theboss = (dial539.compuland.com.br [200.214.11.190])<BR> by sv.compuland.com.br (8.12.5/8.12.9) with = SMTP id h5O00pQd013316; Mon,<BR> 23 Jun 2003 21:00:54 -0300 (BRT = envelope-from <A href="mailto:sarah@goldrush.com">sarah@goldrush.com</A>)<BR>Date: = Mon, 23 Jun 2003 21:00:51 -0300 (BRT)<BR>From: Sarah Fox <<A = href="mailto:sarah@goldrush.com">sarah@goldrush.com</A>><BR>Subject:= Re: Key Leads and Inertia<BR><BR>Thus, the email originated from a = brazilian address with a return address<BR>that I've never had (<A href="mailto:sarah@goldrush.com">sarah@goldrush.com</A>).  It = purportedly made its way from<BR>"theboss" (dial539.compuland.com.br) to my = address at gendernet.org and then<BR>was reflected through Norton to my cable = internet server.  "Theboss" is<BR>probably not to blame -- probably = another forgery.<BR><BR>The content of the virus-forged email was most likely = gleaned from the<BR>PianoTech archives.  If the virus works like most = worms, it probably mailed<BR>itself, with the forged content, to everyone in the = infected computer's<BR>address book.  Therefore it's probably one = of us.  It's most likely someone<BR>who has been visiting the = archives -- again, not I.<BR><BR>Soooo....  If you've visited the archives = lately and have both myself and<BR>Alan -- and now Bill Ballard -- in your = address book (probably if you've<BR>sent us all emails privately), do a virus = scan!  (Note: for those concerned,<BR>I have neither in my address = book.  I = checked.)<BR><BR>Peace,<BR>Sarah<BR><BR><BR><BR>_________________________= ______________________<BR>pianotech list info: <A = href="https://www.moypiano.com/resources/#archives">http://www.ptg.org= /mailman/listinfo/pianotech</A></BLOCKQUOTE></BODY></HTML>