I just got the following email. I love the concept of a dynamic printf string in the message. Makes it look like we're being targeted. Better warn the users... --STeve Andre' Political Science Return-path: <[log in to unmask]> Envelope-to: [log in to unmask] Delivery-date: Tue, 02 Mar 2004 18:47:18 -0500 Received: from roam134-113.fas.harvard.edu ([140.247.134.113] helo=4WGL531) by sys12.mail.msu.edu with smtp (Exim 4.24 #37) id 1AyJba-0007Qg-If for [log in to unmask]; Tue, 02 Mar 2004 18:47:18 -0500 Date: Tue, 02 Mar 2004 18:47:18 -0500 To: [log in to unmask] Subject: Email account utilization warning. From: [log in to unmask] Message-ID: <[log in to unmask]> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--------tslvkyeigxqegbdfxbjn" X-Virus: None found by Clam AV X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on sys12.mail.msu.edu X-Spam-Level: X-Spam-Status: No, hits=0.3 required=5.0 tests=NO_REAL_NAME autolearn=no version=2.60 X-Sanitizer: This message has been sanitized! X-Sanitizer-URL: http://mailtools.anomy.net/ X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.79 2003/06/19 19:22:00 bre Exp $ Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: X-KMail-MDN-Sent: ----------tslvkyeigxqegbdfxbjn Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello user of Msu.edu e-mail server, Our antivirus software has detected a large ammount of viruses outgoing from your email account, you may use our free anti-virus tool to clean up your computer software. For details see the attached file. Best wishes, The Msu.edu team http://www.msu.edu ----------tslvkyeigxqegbdfxbjn Content-Type: application/MODIFIED-1; name="TextDocument_pif.MODIFIED-1" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="TextDocument_pif.MODIFIED-1" [virus begins] TVoAAAEAAAACAAAA//8AAEAAAAAAAAAAQAAAAAAAAAC0TM0hAAAAAAAAAAAAAAAAAAAAAAAA