> This morning I received an attachment from "Microsoft Security
> Bulletin", an official looking memo (probably copied from a real memo),

This one has been around since the last big virus attack.

> Sorry to take the BW here but my address may have been harvested from

Anythings possible, but I have an address that is used only for this list,
and it has not been spammed.  Many times spammers use a dictionary attack,
where they try sending to all email addresses that they can make up from
combinations of common words.  I get this sort of spam to an address that
I use for another list (alt-photo @ bill-collins.net), but vanagon doesn't
seem to be in their dictionary (yet!).  Your address, consisting of two
common names and a number, seems like it could be subject to such attacks
too.  Yes, I know it would take a lot tries to hit an address with two
words, but there are a lot of spammers out there with a lot of computer
power!

Bill