Greetings, I have received two e-mails today with the subject "Important Fraud Alert from Citibank", both of which have a Trojan Horse Virus in them. Both were addressed to N6AJO@ARRL.ORG, which is why I am alerting you as well. If you get an e-mail with the subject shown above, hopefully your virus scanner will catch it, but if not, I suggest deleting it without opening it. The first e-mail appears to have come from Finland. However, the second appears to have come from a client computer that is using Pacific Bell DSL out of their Irvine, CA office (the client IP address is 68.122.96.167), so it is possible, if not likely, that someone in Southern California opened the message, infected their computer, which is now forwarding the virus to everyone in that person's address book. If the e-mail subject looks familiar, and you thing you might have opened it, you may want to update your virus scanner and scan your system. It's unusual to see viruses targeting arrl.org addresses, so (from one of my fav TV shows) "Let's be careful out there." -- Andy Oppel, N6AJO

X-McAfeeVS-TimeoutProtection: 0 Return-Path: <Carolina_Sika@netscape.net> Delivered-To: andy@5 Received: (qmail 37086 invoked by uid 89); 11 Jan 2004 20:27:37 -0000 Received: from unknown (HELO SMTP.ARRL.ORG) (69.0.106.218) by mail.norselandconstruction.com with SMTP; 11 Jan 2004 20:27:37 -0000 Received: from mail.ARRL.ORG ([10.1.120.113]) by SMTP.ARRL.ORG with Microsoft SMTPSVC(5.0.2195.6713); Sun, 11 Jan 2004 15:20:46 -0500 Received: from pacbell.net ([68.122.96.167]) by mail.ARRL.ORG with Microsoft SMTPSVC(5.0.2195.6713); Sun, 11 Jan 2004 15:20:45 -0500 Received: from adsl-68-122-96-167.dsl.irvnca.pacbell.net (adsl-68-122-96-167.dsl.irvnca.pacbell.net [68.122.96.167]) by pacbell.net (8.12.8p1/8.12.8) with ESMTP id vqkbm33495 for <n6ajo@arrl.org>; Mon, 12 Jan 2004 10:17:25 -0400 (EST) Date: Mon, 12 Jan 2004 10:17:23 -0400 (EST) From: Citibank <citibank2193@netscape.net> X-Mailer: The Bat! (v1.61) Personal Reply-To: Carolina_Sika@netscape.net X-Priority: 3 (Normal) Message-ID: <096299354.33738594135620@netscape.net> To: n6ajo@arrl.org Subject: Important Fraud Alert from Citibank MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----------15862859040314" Return-Path: Carolina_Sika@netscape.net X-OriginalArrivalTime: 11 Jan 2004 20:20:45.0785 (UTC) FILETIME=[64F75490:01C3D880]

Andy Oppel andy@andyoppel.com