> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
> Behalf Of Stefan Persson
> Sent: Monday, April 12, 2004 6:47 AM
> [EMAIL PROTECTED] wrote:
> > classroom test of you?
I searched my archives of the Unicode list, and could not find this phrase. I suspect the email in question wasn't an actual list email (or maybe I just didn't get it).
> This mail (containing a virus: shower_response.exe) was sent to me
> through [EMAIL PROTECTED]:
>
> Received: from 209.235.17.55 (EHLO unicode.org) (209.235.17.55)
> by mta150.mail.dcn.yahoo.com with SMTP; Fri, 09 Apr 2004
> 05:17:31 -0700
> Received: from sarasvati.unicode.org (localhost.localdomain
> [127.0.0.1])
> by unicode.org (8.11.6/8.11.6) with ESMTP id i39BupS08634;
> Fri, 9 Apr 2004 07:56:51 -0400
> Received: with ECARTIS (v1.0.0; list unicode); Fri, 09 Apr
> 2004 07:56:50
> -0400 (EDT)
> Received: from unicode.org (slkcapanas11poola155.slkc.uswest.net
> [65.103.249.155])
> by unicode.org (8.11.6/8.11.6) with ESMTP id i39BunS08623
> for <[EMAIL PROTECTED]>; Fri, 9 Apr 2004 07:56:49 -0400
You have not included the full set of headers here. It is common practice for spammers and virus propogaters (yes, there are people who deliberately spread infection, apparently as a hobby) to prepend fake pathing information to hide the start of the real transfers. It is also now common to use stolen IDs, such as mailing lists or individuals, in the sender fields.
> Is there no kind of filter that sorts out viruses from the list?
I believe so, but I am not authoritative on the subject.
/|/|ike
