uh oh!
someones virus is acting up again...
How can I use the page source to determine where this came from?
======================
photoforum wrote:
>
> This is a IE 6.0 patch
> I wish you would enjoy it.
=======================
Return-Path: <jballam@polarnet.com>
Received: from hob.acsalaska.net ([209.112.155.42])
by priv-edtnes62.telusplanet.net
(InterMail vM.5.01.05.17 201-253-122-126-117-20021021) with ESMTP
id <20030208193621.DQKC1598.priv-edtnes62.telusplanet.net@hob.acsalaska.net>
for <robert@earnestphoto.com>; Sat, 8 Feb 2003 12:36:21 -0700
Received: from Sqigva (208-151-96-9-cdsl-rb1.fai.acsalaska.net [208.151.96.9])
by hob.acsalaska.net (8.12.6/8.12.6) with SMTP id h18JaCZW074706
for <robert@earnestphoto.com>; Sat, 8 Feb 2003 10:36:12 -0900 (AKST)
(envelope-from jballam@polarnet.com)
Date: Sat, 8 Feb 2003 10:36:12 -0900 (AKST)
Message-Id: <200302081936.h18JaCZW074706@hob.acsalaska.net>
From: photoforum <photoforum@rit.edu>
To: robert@earnestphoto.com
Subject: A IE 6.0 patch
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=Emr8R8052A748
X-Mozilla-Status: 8001
X-Mozilla-Status2: 00000000
X-UIDL: <200302081936.h18JaCZW074706@hob.acsalaska.net>
--Emr8R8052A748
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<HTML><HEAD></HEAD><BODY>
<FONT>This is a IE 6.0 patch<br>
I wish you would enjoy it.</FONT></BODY></HTML>
--Emr8R8052A748
Content-Type: application/octet-stream;
name=lajitas_hp[1].scr
Content-Transfer-Encoding: base64
Content-ID: <K5bbLY4L1R9A56>
r
