Suspicious mail

[Kurt Wall]

Scribbling feverishly on May 29, Kevin O'Gorman managed to emit:
> I just got the oddest mail from someone I don't know.  Not the
> usual spam, either.  Here are the main headers
> 
> > From: donnagrove23 <donnagrove23 at yahoo.com>
> > Subject: Cellspacing
> >  
> > Content-Type: application/octet-stream;
> >         name=Reso Certification Form.doc
> > Content-Transfer-Encoding: base64
> 
> There follows only the encoded data of what may be a Word document.
> The subject of cellspacing would usually have a slight interest
> for me, but I have no idea what a 'Reso Certification' might be.
> 
> Anybody else seen this?  If so, you should probably ditch it,
> but I'm a bit curious.   Not enough to unpack this thing, but
> curious anyway.

Sounds like KLEZ.W32

Kurt
-- 
Fourth Law of Revision:
	It is usually impractical to worry beforehand about
interferences -- if you have none, someone will make one for you.