David, Ian and Tweeters -

I also got a message thru Tweeters, supposedly sent from me. I use
Symantec Antivirus which scans both incoming and outgoing e-mail
messages. It caught the incoming message and warned me that attachments
had been removed. The attachment was the same as that found by David's
ISP. Like the message received by David, supposedly from Ian, my message
was ostensibly from me but with a difference in the e-mail address.
Interestingly, the text of the actual message was that of a message I
sent out about three months ago (concerning a Steller's Jay nesting).

If you receive an message from:{{{{ B&P Bell <bellasoc at hotmail.com> }}}}
it is not from me and likely has the virus attachment. I would advise
anyone without virus protection to immediately delete such a message.

Because of concern, I immediately updated my Antivirus protection and
ran a complete system check. No viruses were found.

Looks like someone is attempting to hijack several of our names, perhaps
to circumvent screening.

Brian H. Bell
Woodinville WA
bellasoc at isomedia.com

David Ridgway wrote:

> Hi Ian and Tweeters,
>
> I get the Tweeters digest so I don't get e-mails from individuals.
> My ISP's virus protection got an e-mail using your name but from a
> different address than you usually use.
>
> Here is the header:
>
> Date: Wed, 2 Oct 2002 19:49:17 -0700
> From: ian paulsen <ipaulsen at gvrd.bc.ca>
> To:
> Subject: Re: Common Grackle still there
>
> The attachment containing the virus was labeled: audio/x-midi;
> name=Plumages.htm.exe
>
> This is probably a Windows generated virus (.exe attachment) but how
> it got into the tweeters list I don't know. Thought they were mostly
> Outlook generated.
>
> David
>
> --
> David and Ginger Ridgway
> Eastsound, WA
> mailto:dridgin at rockisland.com
> http://davidridgway.net
> http://sjiaudubon.org