From owner-freebsd-questions@FreeBSD.ORG Tue Sep 9 07:25:48 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1C85016A4C0 for ; Tue, 9 Sep 2003 07:25:48 -0700 (PDT) Received: from heron.mail.pas.earthlink.net (heron.mail.pas.earthlink.net [207.217.120.189]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2E1DD43FBD for ; Tue, 9 Sep 2003 07:25:47 -0700 (PDT) (envelope-from algould@datawok.com) Received: from 22-15.lctv-b4.cablelynx.com ([24.204.22.15] helo=yoda.datawok.com) by heron.mail.pas.earthlink.net with asmtp (TLSv1:RC4-MD5:128) (Exim 3.33 #1) id 19wjRB-0004Bd-00; Tue, 09 Sep 2003 07:25:45 -0700 From: "Andrew L. Gould" To: Jerry McAllister Date: Tue, 9 Sep 2003 09:26:03 -0500 User-Agent: KMail/1.5 References: <200309091340.h89Den2D010397@clunix.cl.msu.edu> In-Reply-To: <200309091340.h89Den2D010397@clunix.cl.msu.edu> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200309090926.03790.algould@datawok.com> X-ELNK-Trace: ee791d459e3d6817d780f4a490ca69564776905774d2ac4bdb994fd9ca575ce453ae23df1cf2228d350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c cc: freebsd-questions@freebsd.org Subject: Re: Off-Topic: Did I receive a virus or worm? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Sep 2003 14:25:48 -0000 On Tuesday 09 September 2003 08:40 am, Jerry McAllister wrote: > > HI all! > > > > I received an email last night from a CPE (Continuing Professional > > Education) vendor. The email contents contained an web address to their > > site where I could review my test results for an on-line course I had > > completed. Clicking on the address from within Kmail sent me to the > > appropriate, secure (https) web page in Konqueror. > > > > Below the message, however, were two blocks of gibberish. Both blocks > > begin with a "begin" line and end with an "end" line. There is no > > indication that Kmail included an attachment in-line within the email. > > > > Is it possible that the code was needed to access the web page? If so, I > > don't understand how clicking on the web address would send or use the > > blocks of code. > > > > Should I worry about these blocks of code? > > Yes, you should. > Do not trust any unsolicited code and be cautious of that > which you did request. > > ////jerry > > > Thanks, > > > > Andrew L. Gould > Thanks, Andrew