This is a multi-part message in MIME format. --------------6DBA63E6394A Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Hi folks. I recieved the email below showing "New Napster...". This is a virus/worm containing the BadTrans virus. I tried to email the person who sent it but it came back so hopefully they will see it here as they probably have no idea it was sent. If anyone else is in this persons address book, you will recieve it if you haven't already. DO NOT OPEN IT. Only an AV that has been recently updated will catch it. It had been about 60 days since I had and it did not catch it. I know the the extension .pif is common now with these so I saved it to a floppy and checked it there. When nothing was found I updated my Norton AV and then it found the virus. Sorry to bother the list but it was from someone who uses the list. Hope all of you fine people have a safe and glorious holiday season. Chuck McCardie -- The older I get, the better I was! --------------6DBA63E6394A Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Content-Disposition: inline Return-Path: <MAILER-DAEMON@mail2.kcnet.com> Received: from DOORMAIL.door.net (door.net [208.234.228.206]) by mail2.kcnet.com (8.12.1/8.12.1) with ESMTP id fAPMwSZF023409 for <chuck@kcnet.com>; Sun, 25 Nov 2001 16:58:29 -0600 To: chuck@kcnet.com From: Mail Administrator<Postmaster@DOORMAIL.door.net> Reply-To: Mail Administrator<Postmaster@DOORMAIL.door.net> Subject: Mail System Error - Returned Mail Date: Sun, 25 Nov 2001 16:51:01 -0600 Message-ID: <20011125225101656.AAA2276@DOORMAIL.door.net> MIME-Version: 1.0 Content-Type: multipart/mixed; Boundary="===========================_ _= 3590698(2276)" Content-Transfer-Encoding: 7BIT --===========================_ _= 3590698(2276) Content-Type: text/plain This Message was undeliverable due to the following reason: The following destination addresses were unknown (please check the addresses and re-mail the message): SMTP <_granna@door.net> Please reply to Postmaster@DOORMAIL.door.net if you feel this message to be in error. --===========================_ _= 3590698(2276) Content-Type: message/rfc822 Received: from mail2.kcnet.com ([216.90.72.3]) by DOORMAIL.door.net (Post.Office MTA v3.5.3 release 223 ID# 0-72097U10000L1000S0V35) with ESMTP id net for <_granna@door.net>; Sun, 25 Nov 2001 16:51:01 -0600 Received: from chuck (arc10x225.kcnet.com [209.240.101.225]) by mail2.kcnet.com (8.12.1/8.12.1) with SMTP id fAPMwCZF023221 for <_granna@door.net>; Sun, 25 Nov 2001 16:58:19 -0600 Message-ID: <3C0176C0.1AED@kcnet.com> Date: Sun, 25 Nov 2001 16:54:56 -0600 From: chuck <chuck@kcnet.com> Reply-To: chuck@kcnet.com X-Mailer: Mozilla 3.04Gold (Win95; I) MIME-Version: 1.0 To: Frances Holland <_granna@door.net> Subject: Re: [MOPLATTE] Early American History Database References: <200111252021.fAPKLYp27834@ns3.door.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Frances Holland wrote: > > Name: New_Napster_Site.MP3.pif > Part 1.2 Type: WAV (audio/x-wav) > Encoding: base64 Are you aware you, or at least your computer, sent this to me? I am in the process now of updating my Norton AV, but I am guessing this is a virus/worm and has probably been sent to everyone in you address book. If you opened something that looks like this recently, you are probably infected. The extension ".pif" is the flavor of the month, so to speak, for the new viruses. Once a PC is infected, the worm part of the program mails itself to everyone in your address book. If this is the case, you need to let everyone know NOT to open it or they will be infected as well. Chuck McCardie -- The older I get, the better I was! --===========================_ _= 3590698(2276)-- --------------6DBA63E6394A--