[meteorite-list] Dakhla Dog photo

From: Mark Miconi <mam602_at_meteoritecentral.com>
Date: Thu Apr 22 10:00:11 2004
Message-ID: <001c01c2364a$40e4a000$54b60344_at_ph.cox.net>

Mike,
I looked into www.inside.net and it is a valid website. It would seem to me
that you may have a virus that is copying emails to someone at Inside.net.
Having worked on as an email administrator in my last life, I can tell you a
little about the "Mail Marshall" that is sending the message. It is looking
for Spam, it is doing this by evaluating the subject line of your email. Now
the part that makes me think it is a virus is that the mail marshall is
rejecting your email for a bunch of expressions that were supposedly in your
message...such as the words "click here", which it shows was triggered twice
as shown here:

Expression: click here Triggered 2 times weighting 90

Since the message about the dog photo does not contain those words I have to
believe that something is replicating itself and send email without your
knowledge. The "actual" email address that it went to before the mail
marshall software rejected it was astro-archive_at_inside.net which looks to be
a valid email, but whatever the virus sent to that addy had words in the
subject line and the body of the message that the mail marshall ascertained
to be Spam. Some of the words it rejected were: Click Here, Free, hi, re:,
and click below. When a virus is using your address book to replicate itself
it usually starts at the top of your addresses with the letter "A".

I would recommend a simple test.

Add to your address book an invalid email address that will always be at the
top of your addresses such as the one I use which is !0000_at_!0000.com
<WormALERT>. What this will do is bounce, since the email address is not
valid it will come right back, since you will never really use this addy to
send mail to, if it bounces you will know that you have a virus using your
email addresses. If you use the email !0000_at_!0000.com it will always be the
very first address in your list and 99% of the viruses I have encountered
will start at the first entry in your address book, with the bogus addy at
the top it will bounce back and let you know you have virus.

If you actually copied astro-archive_at_inside.net on that email then I would
look at any signatures you might be adding that have those words above in
the signature. Mail Marshall allows you to setup rules to stop spam, you
give each word a score. When the score exceeds a certain number, the email
is reject and the message is sent that you received.

My bet is that you have a Worm Virus and are not aware that it is on your
PC. There are a couple of new ones out there that install as the email is
being downloaded to your PC. By the time you can delete them from your New
Message list the damage is already done.

Hope this helps.....

Mark M.
Phoenix AZ

----- Original Message -----
From: Michael L Blood <mlblood_at_cox.net>
To: Michael L Blood <mlblood_at_cox.net>; Rosemary Hackney
<ltcrose_at_bellsouth.net>; almitt <almitt@kconline.com>
Cc: Tracy Latimer <tracyl_at_lib.state.hi.us>;
<meteorite-list_at_meteoritecentral.com>
Sent: Saturday, July 27, 2002 2:50 PM
Subject: Re: [meteorite-list] Dakhla Dog photo


> Hi all list members - especially Art:
> I reveive the following message when I post to the list. Are others
> receiving this message as well?
> Michael
>
> The following mail message could not be delivered.
>
> You *must* take action by notifying mailmarshal_at_inside.net or your mail
> message will be deleted within 10 days!
>
> Message: B000051bc9.00000001.mml
> From: mlblood_at_cox.net
> To: astro-archive_at_inside.net
> Subject: [meteorite-list] Dakhla Dog photo
>
> This is due to automatic rules that have determined that the
> message is probably junk mail. If you believe the message was
> private/business related please contact mailmarshal_at_inside.net and request
> that the message be released. If no contact is made within 10
> days the message will automatically be deleted.
>
> !!DO NOT QUOTE THE ORIGINAL MESSAGE OR YOUR REQUEST TO RELEASE THE MESSAGE
> WILL LAND IN THE JUNK FOLDER TOO!!
>
> MailMarshal Rule: Inbound Messages : Spam
> Script Spam Triggered
> Expression: (Monday OR Tuesday OR Wednesday OR Thursday OR Friday OR
> Saturday OR Sunday) AND NOT (Monday to Friday OR Monday - Friday OR
> Monday-Friday OR (result FOLLOWEDBY=10 feedback form)) Triggered 1 times
> weighting -18
> Expression: hi Triggered 1 times weighting -3
> Expression: re: Triggered 1 times weighting -8
> Expression: "CLICK HERE" Triggered 1 times weighting 2
> Expression: "FREE" Triggered 2 times weighting 9
> Expression: click here OR click below Triggered 1 times weighting 2
> Expression: mailing list AND NOT share our mailing list with anyone
> Triggered 3 times weighting 21
> Expression: click here Triggered 2 times weighting 90
>
>
>
> on 7/27/02 2:43 PM, Michael L Blood at mlblood_at_cox.net wrote:
>
> > Hi Rosemary,
> > I cannot send you a copy, as it is not mine. I cannot use it to
> > advertise or promote - though it is in my little booklet about
> > all the Hammers (featured in "Murderers' Row") courtesy of
> > Rob Wesel, who owns full copyright of the photo but was kind
> > enough to let me use it. He is a really nice guy, so, if you contact
> > him, I am sure he will accommodate you as long as your interest
> > is non-commercial (He bought it for his personal & professional
> > logo - pretty cool, eh?).
> > Best wishes, Michael
> >
> > on 7/27/02 2:04 PM, Rosemary Hackney at ltcrose_at_bellsouth.net wrote:
> >
> >> Where can I get a copy of Nakhla dog's photo?? I have one from an ebay
site
> >> on paper... but not a photo..
> >>
> >> Rosie
> >> ----- Original Message -----
> >> From: "Michael L Blood" <mlblood_at_cox.net>
> >> To: "almitt" <almitt_at_kconline.com>
> >> Cc: "Tracy Latimer" <tracyl_at_lib.state.hi.us>;
> >> <meteorite-list_at_meteoritecentral.com>
> >> Sent: Saturday, July 27, 2002 2:41 PM
> >> Subject: Re: [meteorite-list] micromounts!
> >>
> >>
> >>> Hay Al,
> >>> I might have left it out of the commentary in that post, but most
> >>> definitely not left out of the collection! And I got a copy of the
> >>> photo of the dog to prove it, too.
> >>> Hell, I go talking about the Nakhla Dog and we are likely to
> >>> have 3 or 4 more days of tempest in a teacup!
> >>> Best wishes, Michael
> >>>
> >>> on 7/27/02 10:24 AM, almitt at almitt_at_kconline.com wrote:
> >>>
> >>>> Hi Michael and all,
> >>>>
> >>>> Good topic but dang it you left out the Nakhla Dog ;-)
> >>>>
> >>>> --AL
> >>>>
> >>>> Michael Blood wrote:
> >>>>
> >>>> I collected everything I could put my hands on that hit something - a
> >> horse, a
> >>>> car, a
> >>>> mailbox, a person - etc. and made what I consider an absolutely
KILLER
> >>>> collection
> >>>> (in some cases, literally)
> >>>>
> >>>
> >>> "Verbosity leads to unclear, inarticulate things."
> >>> -- Dan Quayle, 11/30/88
> >>> --
> >>> Worth Seeing:
> >>> - Earth at night from satalite:
> >>> http://antwrp.gsfc.nasa.gov/apod/image/0011/earthlights_dmsp_big.jpg
> >>> - Earth - variety of choices:
> >>> http://www.fourmilab.ch/earthview/vplanet.html
> >>> --
> >>> FREE COLLEGE MONEY
> >>> CLICK HERE to search
> >>> 600,000 scholarships!
> >>> http://us.click.yahoo.com/iZp8OC/4m7CAA/ySSFAA/jFYolB/TM
> >>> --
> >>> Michael Blood Meteorites, Didgeridoos & Insects in Amber for sale at:
> >>> http://www.michaelbloodmeteorites.com/
> >>>
> >>>
> >>>
> >>>
> >>> ______________________________________________
> >>> Meteorite-list mailing list
> >>> Meteorite-list_at_meteoritecentral.com
> >>> http://www.pairlist.net/mailman/listinfo/meteorite-list
> >>
> >>
> >> ______________________________________________
> >> Meteorite-list mailing list
> >> Meteorite-list_at_meteoritecentral.com
> >> http://www.pairlist.net/mailman/listinfo/meteorite-list
> >
> > "Verbosity leads to unclear, inarticulate things."
> > -- Dan Quayle, 11/30/88
> > --
> > Worth Seeing:
> > - Earth at night from satellite:
> > http://antwrp.gsfc.nasa.gov/apod/image/0011/earthlights_dmsp_big.jpg
> > - Earth - variety of choices:
> > http://www.fourmilab.ch/earthview/vplanet.html
> > --
> > FREE COLLEGE MONEY
> > CLICK HERE to search
> > 600,000 scholarships!
> > http://us.click.yahoo.com/iZp8OC/4m7CAA/ySSFAA/jFYolB/TM
> > --
> > Michael Blood Meteorites, Didgeridoos & Insects in Amber for sale at:
> > http://www.michaelbloodmeteorites.com/
> >
> >
> >
> >
> > ______________________________________________
> > Meteorite-list mailing list
> > Meteorite-list_at_meteoritecentral.com
> > http://www.pairlist.net/mailman/listinfo/meteorite-list
>
> "Verbosity leads to unclear, inarticulate things."
> -- Dan Quayle, 11/30/88
> --
> Worth Seeing:
> - Earth at night from satalite:
> http://antwrp.gsfc.nasa.gov/apod/image/0011/earthlights_dmsp_big.jpg
> - Earth - variety of choices:
> http://www.fourmilab.ch/earthview/vplanet.html
> --
> FREE COLLEGE MONEY
> CLICK HERE to search
> 600,000 scholarships!
> http://us.click.yahoo.com/iZp8OC/4m7CAA/ySSFAA/jFYolB/TM
> --
> Michael Blood Meteorites, Didgeridoos & Insects in Amber for sale at:
> http://www.michaelbloodmeteorites.com/
>
>
>
>
> ______________________________________________
> Meteorite-list mailing list
> Meteorite-list_at_meteoritecentral.com
> http://www.pairlist.net/mailman/listinfo/meteorite-list
Received on Sun 28 Jul 2002 11:20:05 AM PDT