George R. Stilwell, Jr.
GRSJr at WORLDNET.ATT.NET
Fri May 21 18:15:07 CEST 2004
quote: All were sent from the AEG
I doubt it. Most likely from elsewhere using the AEG list.
Interestingly, Jan Renfroe is not on Arisaema-L at this time.
At 08:02 AM 5/21/2004 -0400, you wrote:
>To all it may
>concern, I also have
>been receiving numerous messages from this "jrenfroe" address, all of
>which contain attachments with various titles attempting to entice the
>recipient. I have been deleting all of them due to their suspicious
>appearance. All were sent from the AEG on behalf of jrenfroe.
>From: George R. Stilwell, Jr. [mailto:GRSJr at WORLDNET.ATT.NET]
>Sent: Thursday, May 20, 2004 4:49 PM
>To: ARISAEMA-L at NIC.SURFNET.NL
>Subject: Re: Hi
>As far as I know attachments from Arisaema-L are not possible. Note that
>most worms hijack addresses and pretend they're sending from them.
>And, I haven't received either the worm or notification of it by my
>virus detection system .
>Therefore I conclude your worm came from elsewhere pretending to be
>That's my best guess.
>At 09:03 AM 5/20/2004 -0400, you wrote:
> >In a message dated 5/19/04 8:59:11 PM, SHERIFFORR at AOL.COM writes:
> >>I just got a virus infected email from Jrenfroe -- watch out
> >>Dick Orr
> >I also received it, certainly not directly from Jan.
> >The strange thing to me is that it came from Arisaema-L as an attachment.
> >I always thought that the Surfnet computer made attachments impossible.
> >Ray, Eric, what's going on?
> >Jim McClements
> >50 S. Prestwick Ct, Dover, Delaware, 19904, USA, Zone 7a
More information about the Arisaema-L