1397  My girlfriend and I both received a virus-laced tango-related e-mail yesterday.

Date: Tue, 10 Jun 2003 10:34:50 -0700
From: Ming Mar <ming_mar@YAHOO.COM>
Subject: My girlfriend and I both received a virus-laced tango-related e-mail yesterday.

We both received identical e-mails. She uses a Mac so
it wasn't a problem for her. I did not download the
attachment, so it was not a problem for me. I scanned
it and the virus W32.Bugbear.B@mm was found.

I mention this because the e-mail had a tango-related
message and possibly somebody else on this list has
received or will receive the same message. I am
reproducing the text of the message below.

----------- start of quote --------------------------

X-Apparently-To: ming_mar@yahoo.com via
216.136.129.182; 09 Jun 2003 19:21:02 -0700 (PDT)
Return-Path: <sergio@attbi.com>
Received: from 204.127.202.56 (EHLO
sccrmhc12.attbi.com) (204.127.202.56) by
-0700 (PDT)

Date: Tue, 10 Jun 2003 23:06:16 +0200
From: andy Ungureanu <andy.ungureanu@T-ONLINE.DE>
Subject: Re: My girlfriend and I both received a virus-laced tango-related e-mail yesterday.

To whom it may concern

The person using the Provider/IP [204.127.202.55] (EHLO
sccrmhc12.attbi.com) is victim of the virus. It sends pieces of (very)
old stored mails (e.g. from Tango-L) to other adresses found in other
stored mails.
Please check your computer!
Andy

Ming Mar schrieb:

> We both received identical e-mails. She uses a Mac so
> it wasn't a problem for her. I did not download the
> attachment, so it was not a problem for me. I scanned
> it and the virus W32.Bugbear.B@mm was found.
>
> I mention this because the e-mail had a tango-related
> message and possibly somebody else on this list has
> received or will receive the same message. I am
> reproducing the text of the message below.
>
> ----------- start of quote --------------------------
>
> X-Apparently-To: ming_mar@yahoo.com via
> 216.136.129.182; 09 Jun 2003 19:21:02 -0700 (PDT)
> Return-Path: <sergio@attbi.com>
> Received: from 204.127.202.56 (EHLO
> sccrmhc12.attbi.com) (204.127.202.56) by
> -0700 (PDT)
> Date: Tue, 10 Jun 2003 02:20:39 +0000 (GMT)
> X-Comment: Sending client does not conform to RFC822
> minimum requirements
> X-Comment: Date has been added by Maillennium.
> Received: from c1381512-a
> (12-236-5-14.client.attbi.com[12.236.5.14](untrusted
> sender)) by attbi.com (sccrmhc12) with SMTP id
> <200306100220210120096suse>; Tue, 10 Jun 2003 02:20:37
> +0000
> From: "SERGIO" <SERGIO@attbi.com>
> Subject: Is Buenos Aires worth the trip? Summary
> MIME-Version: 1.0
> boundary="----------59EAYJFEXGEZK4E"
> Content-Length: 74913

-------Header of a similar mail I have received-----------
From - Tue Jun 10 21:53:09 2003
X-UIDL: 43ad7c62d1b871b0
X-Mozilla-Status: 0011
X-Mozilla-Status2: 10000000
Return-Path: <enrico@undergroundtrader.com>
Received: from sccrmhc11.attbi.com ([204.127.202.55]) by
mailin02.sul.t-online.com
with esmtp id 19PYg2-1V4VJwC; Tue, 10 Jun 2003 04:15:58 +0200

Date: Wed, 11 Jun 2003 08:56:20 +0900
From: astrid <astrid@RUBY.PLALA.OR.JP>
Subject: Re: My girlfriend and I both received a virus-laced tango-related e-mail yesterday.

I also received a tango related message, from enricoAAAnetserv,
enrico@undergroundtrader.com, saying "re: Is Buenos Aires worth the trip?"
in the subject header.
It had a partial message, and an attachment. I updated my antivirus, opened
the attachment, and wham! orange warning screen. I wrote to Enrico, and got
a note, that the address does not exist.
A new virus, which uses old messages from your inbox, and makes up virus
mails.
With false addresses too.
Melinda Bates left the list a year ago, or so, by the way (signed Ming's
message).
Be careful.

----- Original Message -----

From: "Ming Mar" <ming_mar@YAHOO.COM>
Sent: Wednesday, June 11, 2003 2:34 AM
Subject: [TANGO-L] My girlfriend and I both received a virus-laced
tango-related e-mail yesterday.

> We both received identical e-mails. She uses a Mac so
> it wasn't a problem for her. I did not download the
> attachment, so it was not a problem for me. I scanned
> it and the virus W32.Bugbear.B@mm was found.
>
> I mention this because the e-mail had a tango-related
> message and possibly somebody else on this list has
> received or will receive the same message. I am
> reproducing the text of the message below.
>
> ----------- start of quote --------------------------
>
> X-Apparently-To: ming_mar@yahoo.com via
> 216.136.129.182; 09 Jun 2003 19:21:02 -0700 (PDT)
> Return-Path: <sergio@attbi.com>
> Received: from 204.127.202.56 (EHLO
> sccrmhc12.attbi.com) (204.127.202.56) by
> -0700 (PDT)
> Date: Tue, 10 Jun 2003 02:20:39 +0000 (GMT)
> X-Comment: Sending client does not conform to RFC822
> minimum requirements
> X-Comment: Date has been added by Maillennium.
> Received: from c1381512-a
> (12-236-5-14.client.attbi.com[12.236.5.14](untrusted
> sender)) by attbi.com (sccrmhc12) with SMTP id
> <200306100220210120096suse>; Tue, 10 Jun 2003 02:20:37
> +0000
> From: "SERGIO" <SERGIO@attbi.com>
> Subject: Is Buenos Aires worth the trip? Summary
> MIME-Version: 1.0
> boundary="----------59EAYJFEXGEZK4E"
> Content-Length: 74913
>
>
>
> I have made a summary of most opinions with respect to
> this subject up to
> today.
> For more details please see the original posting.
>
> Melinda Bates
>
> She has no particular interest in visiting "tango
> mecca".
> She thinks that the Argentinean teachers touring the
> States are good enou> gh
> influence to learn correct tango.
> US tango events provide opportunities to learn
> "authentic tango" and are > a
> great social experience as well.
> It is not necessary to endure long flights, smoking
>
>
>
>