Robi wrote:

Of course this thread is very off topic here in the A.S.S NG,
but I'm adding the info for others to see.
I think the correct newsgroup would be NANAE (news:news.admin.net-abuse.email)

Dave Trapnell wrote:

Robi wrote:

Dave Trapnell wrote:

Here's a typical sequence...

[snip]

How much need be sent to the ISP? Would not the just header
be sufficient, or do we need to include enough of the virus
to show that it is not just a bogus virus report? 

Without a doubt they will be thrilled to receive yetn another 
eMail virus/worm/ ... 

I suppose I would have to actually TURN OFF Symantec email 
scanning to get an intact copy of the virus, as the viruses 
are intercepted before reaching any of my email clients.

*very* bad idea to turn virus protection off.  I am sure that 
you do not need to send an actual virus sample.  

I don't know exactly what they need. I usually send ... 

AFIK, they want the entire message and all of the headers --  
all of that has to be sent as plain ASCII text.  

I use netscape as an eMail client.  All of the messages are 
saved as flat ASCII files.  I can inspect or copy a message simply 
by using a plain-text editor such as TextPad from 
http://www.TextPad.com 

Here's another example...

Thanks, but I doubt that I need another SPAM/virus/worm example 
-- especially not after getting about 100 copies if swen in the 
past 2 days.  

-- 
Martin G. Diehl

Reality -- That which remains after you stop thinking 
about it.  

All replies and comments accepted and considered.  
Adoption of your suggestions are at my sole discretion.  
Award criteria are unpublished and are considered to 
be a trade secret.  As such, awards for your responses 
cannot be guaranteed.  Incoming flames may be stored 
for use during severe winters or may be circulated for 
deep analysis, peer review, and/or literary criticism.