At 04:32 PM 4/11/2001, Debbie Walters wrote:
>Ahhh, but snow white IS from this list.  I started getting it three days
>ago just after joining this list, and have gotten it every day since.

Snowhite is from everywhere -- anytime an infected machine has your address
pass through it you become a victim-in-waiting, so everyplace your address
exists on the web is an exposure point.  You posted here on Monday, so no
doubt your address is available in the archives for anyone to see.

A couple of copies of snowhite actually did come from the list back in
December, and several others have come from listmembers -- but the great
bulk of ones I've received are from people I've never had any contact
with.  If you track the headers back to see where the message originated,
you can forward that message with full headers to
abuse@wherever_it_originated and they will check their logs to see who was
actually connected on that line at the relevant time, and will notify the
sender that they are infected.  Of course if you can figure out who it
actually is it's better to tell them yourself.

david

David Beierl - Providence, RI
  http://pws.prserv.net/synergy/Vanagon/
'84 Westy "Dutiful Passage"
'85 GL "Poor Relation"