ATTN JMS: Your "virus" problem

[B5JMS Poster]

Subject: ATTN JMS: Your "virus" problem
-----+-------------+--------------------------------------------------
 No. | DATE        |  FROM
-----+-------------+--------------------------------------------------
s  1: Oct 18, 1996: sixstrng at wolfenet.com
*  2: Oct 18, 1996: jmsatb5 at aol.com (Jms at B5)

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

From: sixstrng at wolfenet.com
Lines: 36

Mr. S:

A friend forwarded me your posting about the file that deleted your
DOS directory, though I'm not sure where she got it.

You said that you got this file "off the internet" and that it had an
"anon" address.   Do you mean you downloaded it from a Newsgroup?  If
so, the anon address may be only a bogus address that the user put in;
it may NOT have actually been posted through an anonymous remailer.  

This means you *may* be able to find the culprit.  Look at the 
"Path:" line of the posting.  For example, one of my earlier posts
reads as follows:

Path:
ratty.wolfe.net!news.sprintlink.net!news-chi-13.sprintlink.net!news.sprintlink..net!news-peer..sprintlink..net!howland..erols..net!news1..erols..com!uunet!in1..uu..net!deepthot!bogus
From: sixstrng at wolfenet.com

I could have changed the sixstring at wolfenet.com, but not the rest of
it.  I posted to "ratty.wolfe.net"; the rest of the line shows the
various routes the message took in getting there.  Wolfe.net is the
name of my ISP (Internet Service Provider), where my account resides.

You could then (theoretically) find the ISP of the villian, contact
them with the date, time, and other info about the posting, and they
might be able to find the culprit.  They might then kick them off
their server, or even report him/her to the authorities.

What the person did is not only immoral, it is illegal.  And it ruins
this medium for all of us.

Good luck.  BTW, if you are still having problems getting your system
on-line, feel free to contact me.  I do this sort of thing for a
living (not always by choice!).

Terry

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

From: jmsatb5 at aol.com (Jms at B5)
Lines: 8

Alas, I didn't write down the email address, as the sender said that it
was on the supposed jpg image.  And then my system went kablooey, so
there's no way to backcheck it.


 jms


-***
-*** B5JMS SUBSCRIBERS: Replies to messages in this list go to the list
-*** maintainer, <b5jms-owner at cs.columbia.edu>.  If you want to reply
-*** elsewhere, adjust the "To" field.  The best way to reach JMS is to post
-*** to rastb5m, which can be done by sending email to <rastb5 at solon.com>.