Re: Suspect email from group

>--- In CAD_CAM_EDM_DRO@y..., bjammin@i... wrote:
> At 12:51 PM 10/4/02 -0000, you wrote:
> >I have gotten 3 very suspect e-mails in the last 24 hours.
> >one was a bat file
> >the other two were *.scr files.
>

Got this one tonight. Obviously riding piggyback on Fred's valid web
address. An .exe to boot.
Fortunately I run a scan mal program first to vet all mail and Agent
won't run files automatically.
***************************************
Return-Path: <markatswat@...>
Received: from mail.redshift.com ([216.228.2.86]) by mta05-
svc.ntlworld.com
(InterMail vM.4.01.03.27 201-229-121-127-20010626) with
ESMTP
id <20021005004210.MITR27697.mta05-
svc.ntlworld.com@...>
for <machines@...>; Sat, 5 Oct 2002 01:42:10 +0100
Received: from larry02 (pm6-187.sal.redshift.com [216.228.10.187])
by mail.redshift.com (8.12.5/8.12.3) with SMTP id
g950Ggxk002646;
Fri, 4 Oct 2002 17:16:42 -0700
Date: Fri, 4 Oct 2002 17:16:42 -0700
Message-Id: <200210050016.g950Ggxk002646@...>
From: "Mark" <markatswat@...>
Subject: [CAD_CAM_EDM_DRO] Re: newbie Question
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----------
ZMBAZZN9Z9D5JZ5"

File attached as SETUP.EXE
*********************************

John S.