Hi, last night I received the same eMail with attchement named healthnetcoveragelist.xls.lnk .pif and .lnk extensions will never show in windows, unless you make a registry hack like AlwaysShowExt = "" The complete mail with base64 coded is 206 KB size, pretty much for a virus ! Did anybody check out what this thingy does ?? mike blum ____________________Antwort-Abtrennung____________________ Betreff: Re: Fwd: [suse-security] Should I be worried about the CodeR Verfasser: Datum: 25.07.2001 09:48 never - never open an attachment you don't wait specifically for ! I receive nearly a virus/trojan each day. [snip] jdd say, just after your message, on my box I got this (I send you only partial copy): ------6BC6674D_Outlook_Express_message_boundary Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: message text Hi! How are you=3F I send you this file in order to have your advice See you later=2E Thanks ------6BC6674D_Outlook_Express_message_boundary Content-Type: application/mixed; name=court.doc.pif Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename=court.doc.pif #look at the filename !!!! TVpQAAIAAAAEAA8A//8AALgAAAAAAAAAQAAaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAEAALoQAA4ftAnNIbgBTM0hkJBUaGlzIHByb2dyYW0gbXVzdCBiZSBydW4gdW5k ZXIgV2luMzINCiQ3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFBFAABMAQgAGV5CKgAA AAAAAAAA4ACOgQsBAhkAqAEAAGwAAAAAAACkqQEAABAAAADAAQAAAEAAABAAAAACAAABAAAA AAAAAAQAAAAAAAAAAIACAAAEAAAAAAAAAgAAAAAAEAAAQAAAAAAQAAAQAAAAAAAAEAAAAAAA AAAAAAAAAPABAK4RAAAAYAIAABgAAAAAAAAAAAAAAAAAAAAAAAAAMAIAOCAAAAAAAAAAAAAA AAAAAA -- http://www.dodin.net mailto:jdanield@dodin.net WHO'S THAT GUY ? Help me found it Russia & South america help needed http://www.dodin.net/serge/index.html -- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com