>And lastly, another tip-off. This is the From in the mail header in the >infected virus: paulthomas <paulthomas@xxxxxxx> > >Here is one of Paul's normal emails: Paul Thomas <paulthomas@xxxxxxx> > >It takes very little to change that (simply change it in your email >client preferences) but it is something that people rarely have reason >to change, so that lends itself as something calling into doubt that it >came from Paul's machine. Perhaps the lowercase version is culled from the address book of the infected machine? >> home.golden.net/samu << Users can subscribe to the List by sending an email to <muglo-request@xxxxxxxxxxxxx> with 'subscribe' in the Subject field Users can unsubscribe from the List by sending an email to <muglo-request@xxxxxxxxxxxxx> with 'unsubscribe' in the Subject field Users must send messages or replies to <muglo@xxxxxxxxxxxxx> All messages are archived so that you can view them at any time by going to <//www.freelists.org/archives/muglo> Problems concerning use of the FreeList should be sent to <paulthomas@xxxxxxx> Don't forget to periodically check our web site at: http://muglo.on.ca/