In a message dated 7/01/02 8:01:26 pm. W. Australia Standard Time, AUS-TAS-SURNAMES-D-request@rootsweb.com writes: Please DO NOT post message such as this to the list. If you have a concern please contact me OFFLIST or the Co-admin. Thank you Sandie Lady of the List > X-Message: #2 > Date: Sun, 6 Jan 2002 12:09:29 EST > From: Ragingmountain@aol.com > To: AUS-TAS-SURNAMES-L@rootsweb.com > Message-ID: <152.6d61094.2969dec9@aol.com> > Subject: [AUS-TAS-SURNAMES] Fwd: Returned mail: User unknown > > --part1_152.6d61094.2969dec9_boundary > Content-Type: multipart/alternative; > boundary="part1_152.6d61094.2969dec9_alt_boundary" > > > --part1_152.6d61094.2969dec9_alt_boundary > Content-Type: text/plain; charset="US-ASCII" > Content-Transfer-Encoding: 7bit > > Folks: > > I should like to inform you that on another RootsWeb site, that I > too > have had an attack. You may want to run a security check and at least > clear > your transmission systems. > > A trick I have employed is to check out unusual ISP names, and > ascertain if they are real. There is one contained in one of your > contributions which I will investigate for curiosity's sake; and yes, I DO > own a cat; AND two small dogs. Besides, I am a Leo, what more do you want? > > My recommendation is to locate AVG. Anti-virus on a keyword search, > and install the freeware version. My letter below will explain. After you > receive your note, and your virus guard refuses entry, such as mine did, > purge your system of it AFTER you send a copy of the address to the > OFFENDING > ISP's postmaster informing him of the client's transmission and the > attached > virus. Upon elimination of the intruder, inform YOUR transmitter of the > same > information, for nothing else than documentation of the event coming from > his > site. It is a matter of self protection by protecting others as well. > > Again, look up AVG. Anti-virus or virus guard and USE it. It could > you save you from a lot of problems down the road. > > T. J. Baglin > Rochester, New York, USA 14616 > > Ragingmountain@aol.com > > > --part1_152.6d61094.2969dec9_alt_boundary > Content-Type: text/html; charset="US-ASCII" > Content-Transfer-Encoding: 7bit > > Folks: > > > > I should like to inform you that on > another RootsWeb site, that I too have had an attack. You may want to > run a security check and at least clear your transmission systems. > > > > A trick I have employed is to check > out unusual ISP names, and ascertain if they are real. There is one > contained in one of your contributions which I will investigate for > curiosity's sake; and yes, I DO own a cat; AND two small dogs. > Besides, I am a Leo, what more do you want? > > > > My recommendation is to locate AVG. > Anti-virus on a keyword search, and install the freeware version. My > letter below will explain. After you receive your note, and your > virus guard refuses entry, such as mine did, purge your system of it AFTER > you send a copy of the address to the OFFENDING ISP's postmaster informing > him of the client's transmission and the attached virus. Upon > elimination of the intruder, inform YOUR transmitter of the same > information, for nothing else than documentation of the event coming from > his site. It is a matter of self protection by protecting others as > well. > > > > Again, look up AVG. Anti-virus or > virus guard and USE it. It could you save you from a lot of problems > down the road. > > > > & > nbsp; & > nbsp; & > nbsp; T. J. Baglin > > & > nbsp; & > nbsp; & > nbsp; Rochester, New York, USA 14616 > > > > & > nbsp; & > nbsp; & > nbsp; Ragingmountain@aol.com > > > > > --part1_152.6d61094.2969dec9_alt_boundary-- > > --part1_152.6d61094.2969dec9_boundary > Content-Type: message/rfc822 > Content-Disposition: inline > > Return-path: <Ragingmountain@aol.com> > From: Ragingmountain@aol.com > Full-name: Raging mountain > Message-ID: <149.750942a.2966ff19@aol.com> > Date: Fri, 4 Jan 2002 07:50:33 EST > Subject: Fwd: Returned mail: User unknown > To: ALSATIAN-AMERICAN-L@rootsweb.com > CC: Postmaster@earthlink.net > MIME-Version: 1.0 > Content-Type: multipart/mixed; > boundary="part2_152.6d61094.2966ff19_boundary" > X-Mailer: AOL 7.0 for Windows US sub 118 > > > --part2_152.6d61094.2966ff19_boundary > Content-Type: multipart/alternative; > boundary="part2_152.6d61094.2966ff19_alt_boundary" > > > --part2_152.6d61094.2966ff19_alt_boundary > Content-Type: text/plain; charset="US-ASCII" > Content-Transfer-Encoding: 7bit > > Folks: > > Below you will find a letter from a source that is infected with the > I-Worm virus. Fortunately, I have a security screen that detects that and > has prohibited acceptance. > > You will notice that the message I sent for a resubmission was > returned to me with a "User Unknown" code 550. It is also interesting to > note that the e-mail is somewhat bogus as "www.onemain.com" translates to > www.earthlink.net. > > This is an FYI alert for any others that receive such messages; > please > pass on. > > Ragingmountain@aol.com > > > --part2_152.6d61094.2966ff19_alt_boundary > Content-Type: text/html; charset="US-ASCII" > Content-Transfer-Encoding: 7bit > > Folks: > > > > Below you will find a letter from a > source that is infected with the I-Worm virus. Fortunately, I have a > security screen that detects that and has prohibited acceptance. > > > > You will notice that the message I > sent for a resubmission was returned to me with a "User Unknown" code 550.& > nbsp; It is also interesting to note that the e-mail is somewhat bogus as > "www.onemain.com" translates to www.earthlink.net. > > > > This is an FYI alert for any others > that receive such messages; please pass on. > > > > & > nbsp; & > nbsp; & > nbsp; Ragingmountain@aol.com > > > > > --part2_152.6d61094.2966ff19_alt_boundary-- > > --part2_152.6d61094.2966ff19_boundary > Content-Type: message/rfc822 > Content-Disposition: inline > > Return-Path: <> > Received: from rly-ye04.mx.aol.com (rly-ye04.mail.aol.com > [172.18.151.201]) by air-ye04.mail.aol.com (v83.26) with ESMTP id > MAILINYE49-0104073415; Fri, 04 Jan 2002 07:34:15 -0500 > Received: from imo-m03.mx.aol.com (imo-m03.mx.aol.com [64.12.136.6]) by > rly-ye04.mx.aol.com (v83.26) with ESMTP id MAILRELAYINYE47-0104073402; Fri, > 04 Jan 2002 07:34:02 -0500 > Received: from localhost (localhost) > by imo-m03.mx.aol.com (8.8.8/8.8.8/AOL-5.0.0) > with internal id HAA01725; > Fri, 4 Jan 2002 07:34:02 -0500 (EST) > Date: Fri, 4 Jan 2002 07:34:02 -0500 (EST) > From: Mail Delivery Subsystem <MAILER-DAEMON@aol.com> > Subject: Returned mail: User unknown > Message-Id: <200201041234.HAA01725@imo-m03.mx.aol.com> > To: Ragingmountain@aol.com > MIME-Version: 1.0 > Content-Type: multipart/report; report-type=delivery-status; > boundary="HAA01725.1010147642/imo-m03.mx.aol.com" > Auto-Submitted: auto-generated (failure) > X-Mailer: Unknown (No Version) > > > --HAA01725.1010147642/imo-m03.mx.aol.com > > The original message was received at Fri, 4 Jan 2002 07:33:53 -0500 (EST) > from root@localhost > > ----- The following addresses had permanent fatal errors ----- > <_rs1035080@onemain.com> > > ----- Transcript of session follows ----- > ... while talking to onemain-mx.earthlink.net.: > >>> RCPT To:<_rs1035080@onemain.com> > <<< 550 _rs1035080@onemain.com...User unknown > 550 <_rs1035080@onemain.com>... User unknown > > --HAA01725.1010147642/imo-m03.mx.aol.com > Reporting-MTA: dns; imo-m03.mx.aol.com > Arrival-Date: Fri, 4 Jan 2002 07:33:53 -0500 (EST) > > Final-Recipient: RFC822; _rs1035080@onemain.com > Action: failed > Status: 5.1.1 > Remote-MTA: DNS; onemain-mx.earthlink.net > Diagnostic-Code: SMTP; 550 _rs1035080@onemain.com...User unknown > Last-Attempt-Date: Fri, 4 Jan 2002 07:34:02 -0500 (EST) > > --HAA01725.1010147642/imo-m03.mx.aol.com > Content-Type: message/rfc822 > > Received: from Ragingmountain@aol.com > by imo-m03.mx.aol.com (mail_out_v31_r1.9.) id 1.5f.204c5d62 (18709) > for <_rs1035080@onemain.com>; Fri, 4 Jan 2002 07:33:53 -0500 (EST) > Return-path: <Ragingmountain@aol.com> > From: Ragingmountain@aol.com > Message-ID: <5f.204c5d62.2966fb31@aol.com> > Date: Fri, 4 Jan 2002 07:33:53 EST > Subject: Re: ALSATIAN-AMERICAN-D Digest V01 #5 > To: _rs1035080@onemain.com > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="part1_5f.204c5d62.2966fb31_boundary" > X-Mailer: AOL 7.0 for Windows US sub 118 > > > > --part1_5f.204c5d62.2966fb31_boundary > Content-Type: text/plain; charset="US-ASCII" > Content-Transfer-Encoding: 7bit > > Please resend last transmission. > > Unable to receive due to I-Worm virus your message, per security > screener. > > Thanks. > > Ragingmountain@aol.com > > > --part1_5f.204c5d62.2966fb31_boundary > Content-Type: text/html; charset="US-ASCII" > Content-Transfer-Encoding: 7bit > > Please resend last transmission. > > > > Unable to receive due to I-Worm virus > your message, per security screener. & > nbsp; & > nbsp; & > nbsp; & > nbsp; & > nbsp; > > > > Thanks. > > > > & > nbsp; & > nbsp; & > nbsp; Ragingmountain@aol.com > > > > > > --part1_5f.204c5d62.2966fb31_boundary-- > > --HAA01725.1010147642/imo-m03.mx.aol.com-- > > --part2_152.6d61094.2966ff19_boundary-- > > --part1_152.6d61094.2969dec9_boundary-- > > >