This seems to be a version of W32.Sober. It can use various source e-mail addresses, including Hostmaster@..., Webmaster@..., Postmaster@... I have to deal with responses to one of those.... Doug On Fri, May 20, 2005 at 09:31:43AM -0400, Laurence Bates wrote: > FYI (zip file removed) > > -----Original Message----- > From: Bob Benham [mailto:[log in to unmask]] > Sent: Friday, May 20, 2005 9:21 AM > To: [log in to unmask] > Cc: Kate Baird > Subject: RE: possible virus attached? - FW: Your Email Account isSuspended > For Security Reasons > > Laurence, > > Are other people in our college also receiving this suspicious msg, w/ a zip > file attached? > > Bob B. > > > ------ Forwarded Message > From: [log in to unmask] > Date: Thu, 19 May 2005 13:45:45 -0400 > To: [log in to unmask] > Subject: Your Email Account is Suspended For Security Reasons > > Once you have completed the form in the attached file , your account records > will not be interrupted and will continue as normal. > > > > ------ End of Forwarded Message -- Doug Nelson, Network Manager | [log in to unmask] Academic Computing and Network Services | Ph: (517) 353-2980 Michigan State University | http://www.msu.edu/~nelson/