Return-Path: <owner-ips-outgoing@ece.cmu.edu>
Received: from newbox.ece.cmu.edu (localhost [127.0.0.1])
	by newbox.ece.cmu.edu (Cyrus v2.1.12) with LMTP; Wed, 20 Aug 2003 20:19:33 -0400
X-Sieve: CMU Sieve 2.2
Received: from osgood.ece.cmu.edu (OSGOOD.ECE.CMU.EDU [128.2.129.25])
	by newbox.ece.cmu.edu (Postfix) with ESMTP id 0923731FE
	for <ipsml@ece.cmu.edu>; Wed, 20 Aug 2003 20:19:33 -0400 (EDT)
Received: by osgood.ece.cmu.edu (Postfix, from userid 953)
	id D9DF78F; Wed, 20 Aug 2003 20:18:47 -0400 (EDT)
Received: from sos.ece.cmu.edu (SOS.ECE.CMU.EDU [128.2.129.27])
	by osgood.ece.cmu.edu (Postfix) with ESMTP
	id 8CC90D7; Wed, 20 Aug 2003 20:18:00 -0400 (EDT)
Received: by sos.ece.cmu.edu (Postfix)
	id E5BC989ED; Wed, 20 Aug 2003 20:17:48 -0400 (EDT)
Delivered-To: ips-outgoing@sos.ece.cmu.edu
Received: from osgood.ece.cmu.edu (OSGOOD.ECE.CMU.EDU [128.2.129.25])
	by sos.ece.cmu.edu (Postfix) with ESMTP id DA32389E9
	for <ips-outgoing@sos.ece.cmu.edu>; Wed, 20 Aug 2003 20:17:48 -0400 (EDT)
Received: by osgood.ece.cmu.edu (Postfix)
	id DA884C8; Wed, 20 Aug 2003 20:17:47 -0400 (EDT)
Delivered-To: ips-outgoing@ece.cmu.edu
Received: by osgood.ece.cmu.edu (Postfix, from userid 953)
	id 5836EC2; Wed, 20 Aug 2003 20:15:41 -0400 (EDT)
Received: from sos.ece.cmu.edu (SOS.ECE.CMU.EDU [128.2.129.27])
	by osgood.ece.cmu.edu (Postfix) with ESMTP id 902E9C2
	for <ips-outgoing@ece.cmu.edu>; Wed, 20 Aug 2003 20:14:18 -0400 (EDT)
Received: by sos.ece.cmu.edu (Postfix, from userid 363)
	id 900F189EF; Wed, 20 Aug 2003 20:14:17 -0400 (EDT)
X-Original-To: ips@sos.ece.cmu.edu
Delivered-To: ips@sos.ece.cmu.edu
Received: from hazard.ece.cmu.edu (HAZARD.ECE.CMU.EDU [128.2.129.24])
	by sos.ece.cmu.edu (Postfix) with ESMTP id B3AD989D8
	for <ips@sos.ece.cmu.edu>; Wed, 20 Aug 2003 20:14:15 -0400 (EDT)
Received: by hazard.ece.cmu.edu (Postfix)
	id D43D41B3; Wed, 20 Aug 2003 20:14:14 -0400 (EDT)
Delivered-To: ips@ece.cmu.edu
Received: by hazard.ece.cmu.edu (Postfix, from userid 953)
	id C6B7616D; Wed, 20 Aug 2003 14:32:40 -0400 (EDT)
Received: from castor.cnt.com (castor.cnt.com [139.93.129.4])
	by hazard.ece.cmu.edu (Postfix) with ESMTP id 4CF357ED
	for <ips@ece.cmu.edu>; Wed, 20 Aug 2003 14:29:50 -0400 (EDT)
Received: from esply02.cnt.com (esply02.cnt.com [139.93.35.239])
	by castor.cnt.com (8.12.9/8.12.9) with ESMTP id h7KITpJF021878
	for <ips@ece.cmu.edu>; Wed, 20 Aug 2003 13:29:51 -0500
Received: by esply02.cnt.com with Internet Mail Service (5.5.2653.19)
	id <QK01X41K>; Wed, 20 Aug 2003 13:29:40 -0500
Message-ID: <3C7122FAF06DD5118ED600500473364803B22C72@esply01.cnt.com>
From: Andy Homan <Andy_Homan@cnt.com>
To: "'ips@ece.cmu.edu'" <ips@ece.cmu.edu>
Subject: VIRUS:  RE: Approved
Date: Wed, 20 Aug 2003 13:29:39 -0500
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="iso-8859-1"
X-Scanned-By: MIMEDefang 2.32 (www . roaringpenguin . com / mimedefang)
Sender: owner-ips@ece.cmu.edu
Precedence: bulk
X-Spam-Status: No, hits=-1.6 required=5.0
	tests=BAYES_30
	version=2.50
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 2.50 (1.173-2003-02-20-exp)

FYI:  
For those of you not yet aware, a virus by the name of SoBig.F is currently
making its round.  The return address on the email with subject "Re:
Approval" was spoofed and the email DID contain the SoBig.F virus in the
form of a screensaver named "wicked_scr.scr".  For your own sake, please
resist any temptations to check out the "wicked" screensaver, as it is truly
wicked indeed.

	-AJH

----------------------------------------------------------------------------
"An attachment named wicked_scr.scr was removed from this document as it
constituted a security hazard.  If you require this document, please contact
the sender and arrange an alternate means of receiving it."
