Laurence Bates wrote: > I presume that this is a spoof, but one that could catch out a lot of MSU > users. This looks like a variant of W32.Beagle (W32/Bagle). This was first discovered in January; a variant of Beagle/Bagle from March 2 first sent out messages of this nature (W32.Beagle.J). I do see that a new variant (W32.Beagle.ad) was released on July 4; perhaps that's the one you're seeing here. Doug > _____ > > From: [log in to unmask] [mailto:[log in to unmask]] > Sent: Tuesday, July 06, 2004 7:18 AM > To: [log in to unmask] > Subject: E-mail account disabling warning. > > > Dear user, the management of Msu.edu mailing system wants to let you know > that, > > Some of our clients complained about the spam (negative e-mail content) > outgoing from your e-mail account. Probably, you have been infected by > a proxy-relay trojan server. In order to keep your computer safe, > follow the instructions. > > Please, read the attach for further details. > > Cheers, > The Msu.edu team http://www.msu.edu > Doug Nelson, Network Manager | [log in to unmask] Academic Computing and Network Services | Ph: (517) 353-2980 Michigan State University | http://www.msu.edu/~nelson/