I think I found the problem: "The spread of the virus, which originated in the UK, would have been slowed if BT Openworld had installed the latest Microsoft Outlook patches." - Microsoft software always does insane dangerous things. Should have used a proper email client.

That was exactly the point I was trying to make to them. I was working solo on a client's site, installing a new server or something, when the beastie dropped. I submitted it to Symantec for investigation from site, then packed up and drove home. No response from Symantec, so I rang BT support line. I was on the phone until well after midnight - we had to drop the call at midnight for a shift change, and they rang me back.

THEY were trying to help ME sort out my laptop: I was telling THEM that they had a serious problem at their end, and should be getting the night duty manager out of bed. I forget exactly how (it was 20 years ago, and we were both new to ADSL), but it was clear to me even that night that they were missing a critical service pack for Windows 2000.

I failed to get them to budge, which is why I went first to an alternative AV firm to confirm the payload was malicious, and then to the computer press.

End of conversation. I have the vineyards of the Douro to explore.

End of conversation. I have the vineyards of the Douro to explore.

Enjoy your exploration! I remember when still in the forces, returning with "slightly" over the limit of what I was allowed to bring back. Forces going through red channel is mandatory so I declared everything I had and was waved through. One of my colleagues in another Landrover thought he was smarter than the customs people and after being caught, poured away his excess in front of them, was still charged the duty on it and was delayed for several hours while they stripped his vehicle, to see if anything else was stashed there.

Why would your email program run code from a header?

Because it is required by the standard. You haven't looked at the standards since the 1.0 versions have you? Delivery of advertising drives the standards now.

Surely being charged duty on what you no longer have is theft?

He brought the spirits into the country therefore was liable to pay duty on them. The fact that they were in a puddle on the floor has no relevance.

High street stores pay duty at the time of purchase from their supplier. Duty on alcohol in the UK is levied at production not at the time of sale to the consumer and is calculated following a set of rules which designed to cope with changes in rate, and how those changes are applied along the chain.
Asda, and all other similar stores, will have set their selling price to allow for some percentage of "shrinkage".

Any of the non-human readable text can be perverted to trigger the download or execution of another file - scary or what?
Modern AV software scans these bits for patterns that match, or look similar to, suspicious objects and then acts in an appropriate manner.

Then the government are criminals.

Has that ever been in doubt? (At least since the current lot came to power.)

Sigh, endless, endless, endless.....

Grumble.
After being screwed over by the system for years...
...still waiting for that £150.
From a post on 2 April

We expect to make the online form available at the end of May 2022.

Now...

We will make the online application form available in mid-June 2022.

Sheesh, 4 months to do a simple update.
Glory.
Now that I'm officially retired, have money thrown at me left right & centre.
Thank you Mr CoE.
Look forward to receiving that £1k+ in Sept/Oct. :-)

Why would your email program run code from a header?

Because it is required by the standard. You haven't looked at the standards since the 1.0 versions have you? Delivery of advertising drives the standards now.

I very much doubt there's a standard requiring to run executable code in the headers. This is a set of headers from a random email message I recently received. Show me where code would reside:

What an antiquated mail sender in your example ...

Received: from 10.253.37.223
 by atlas207.aol.mail.gq1.yahoo.com with HTTPS; Thu, 26 May 2022 16:30:45 +0000
Return-Path: <010001810134ab98-455f7521-b524-4cc8-9375-888ef4686341-000000@amazonses.com>
X-Originating-Ip: [23.251.255.195]
Received-SPF: pass (domain of amazonses.com designates 23.251.255.195 as permitted sender)
Authentication-Results: atlas207.aol.mail.gq1.yahoo.com;
 dkim=pass header.i=@recalldageorgegascon.org header.s=ztnarf7htvbalru2erxbqry67trec334;
 dkim=pass header.i=@amazonses.com header.s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw;
 spf=pass smtp.mailfrom=amazonses.com;
 dmarc=unknown header.from=recalldageorgegascon.org;
X-Apparently-To: xxxxxxxxxxxxxx; Thu, 26 May 2022 16:30:46 +0000
X-YMailAVSC: CSIiH1s3bBtLSXCTw.nY6Iyh.VV0I6jGPY8bFyDE5lcvZam
 o0KySYTXQr2gnVvcjtqoXdqdD0MGWYQ0AahUxqaisIxjkLcWEi2mNa5bBkbB
 1_6ejPd80RhGR9W1aqJEWyqDteM.7cSWsdH7zitvD3_o7lGmOCT9E5tdyVHV
 KmJQ39eL7jDqCYNPDpgXb.86SD7Tmu1eZd61I2EN9EtIWf3vf09CcX3P.htZ
 TlDjHda10IYw0mFKbHgOx0OW0W6HqxPT_vQABhsq_qWmH7ATSwj9Bh10M1Nh
 uYo1vISnZlMhyk_x7IXbcbr787Hg70WEwBiAHKkk1LLPJjaBUm2hNgWt1UxI
 3
X-YMailISG: 0ryfnsUWLDtZ.VVYHsAEkG_QnsiYCsgIDS75583XgUBZEXgn
 JYbL_ivBVJkHudnbRoKLqSs8drmnUlgsaa.qB3CmHhyLPbX5WOU4vmz8yq48
 RWRhNXuQlxbNpVBAI_it3X70h.zWSYr0sW8r4RkWrLncCQ3kJ86iOxfeW_mI
 B85VLBnzJHEo6yoag4pgWzRhGbxNIgVNJX57L54yGub2N.P8OXQfNU4iyfy9
 xfCBQKBxiyz9fvA1bbl8bTOG5U.x5iKl_e2q9FGbBuvFAgH0DQJGg1QSFuET
 Dz6LOWg_akZ5R6kUWMq2r5GKwF5XCv9uPT8SVoGpj5OHIV3vj99fUwXbWKm6
 m21qph1x35IsWrA8T0eIDZnEG6l5bSdobKLsUoKuMpLsCy40mnFvubFwJ.tf
 Mnq9H1tMsdstXIzdWvkDeWluv0UGLPuKoxY8qlqBaMhXycsvZA4I4RS_xPBj
 7bLh5njIPXvNiU2_f_aTS4EGrW0sJwOXkirBgYKxqdUw3RzYHctUeX7qgch8
 Kmp7z45nslmB5lwR7PY9cO42BU5FiGAu8V5Exq06Mrcg4V0Cs17X1GMWe64M
 yLWR.X0nGOZBV8eH0UTcP_EIKAY_P9vttrk3rXP.fjJ_2eFB9Q6uKjJW0viB
 TsX6DAH4kpVPvv21OGeZgkwZvuEjSc7HE1dsizejU4DD3DgJkRSExJqo8bht
 H1df.HAssgO3KkgbfubS29pek3bt.GD6YTwkPjt4TAMC0SlbegMvwelf1gGp
 iWK8lrnu0bm5V5l1MY3iaILNctn3Qv.Auo_QcyPEbYJDFlgIGybdAQ2jQeQg
 b3xK.zolphwk1.hEbcxOxE95mbs4FdYGCOALogC0pzzfiGytVE45lSc4pAUQ
 th_WkE9Uiy4o4XvL1f8QcYEH2sHLqQqYy8H88dC3SJKgfTZO1H_kQfWBn8fq
 Skwp3AFMYeDSDbJIISSlhRoubN39.ftrAjx9ye63xdossWngX8u5MnnT9lZ9
 cd2zxe2pJf.poOyp8yTxXk_LExoflTkrOUvC1FeqwxBtEAeGfqEVPNWWFKSB
 _0DiUK7M07DPeyImNdku80urbegD.0HcU_I7m0RmlA5DINg3EiakIJ8D4M9h
 XJOMU.1mMs4LOgz78owCV7OCSMD_84DGIgY6IOscagbILnu8UX23d18j11NJ
 ctZoitMmHwgwhy9LG68dR86s1383yhJlhTPiNsGPy5kkO2BgrdSzx5XCtqo7
 xCGm4g--
Received: from 23.251.255.195 (EHLO e255-195.smtp-out.amazonses.com)
 by 10.253.37.223 with SMTPs
 (version=TLS1_2 cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256);
 Thu, 26 May 2022 16:30:45 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
	s=ztnarf7htvbalru2erxbqry67trec334; d=recalldageorgegascon.org;
	t=1653582638;
	h=Date:From:Reply-To:To:Message-ID:Subject:MIME-Version:Content-Type:List-Unsubscribe;
	bh=oCdQfyAAIg0SxOubITgJW0sF74GbU1r408FWZCNeB3M=;
	b=HNj9CP+IXTIA2FKor40XL09ADn2r9btk02AOCMnb4XgpfBNYmcG6IrhooxNiXEYO
	KkjrKUofqfpwS9eEgyd49r+az9Q7dHfRAnftk9z7V+unz1IHWY7/aeftAtnYySmXJZ3
	fHLpCCxUJs304CU8uFZAoGZnrWhs2QPzGBw6nxM986L8JywHSOoK45jK1eAnGIn5KeY
	NaPEvWEjd3KB3LBfOEreV8pc1JMuN6Q1vphsTddDF66ZgtuQF5lTofjBORsSkf8IE1J
	3gkfQlACxPel4EJ4+VM/SdFd6Os09iL1D29dil/gvlfq3sCGPYnuIAu9rvUyYuKROvO
	zIwPNdPnzg==
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
	s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw; d=amazonses.com; t=1653582638;
	h=Date:From:Reply-To:To:Message-ID:Subject:MIME-Version:Content-Type:Feedback-ID:List-Unsubscribe;
	bh=oCdQfyAAIg0SxOubITgJW0sF74GbU1r408FWZCNeB3M=;
	b=Z9HVWLFzLEv4jkiifLSuziT/Vkmozi44A5zky+9ILgXVPU19GamIbwX7gKxPMdO4
	VOuMu/nwaSavacpTkySZqaHel3khHgKiupGAmrk9mHhxfuxud52eyRUjwAw8jI9F0ns
	4Kbnf0Z2yPOo51BRy+6KoY8G6A1brqGOWymv+QRk=
Date: Thu, 26 May 2022 16:30:37 +0000
From: =?UTF-8?Q?Recall_DA_George_Gasc=C3=B3n_Committee?=
 <info@recalldageorgegascon.org>
Reply-To: info@recalldageorgegascon.org
To: xxxxxxxxxxxxxxxxxxxx
Message-ID: <010001810134ab98-455f7521-b524-4cc8-9375-888ef4686341-000000@email.amazonses.com>
Subject: Remember Hannah Tubbs?
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_2613098_665098026.1653582637962"
X-Campaign-ID: 4329428
Feedback-ID: 1.us-east-1.lCJVkz6+3S71MtYe1CeGk/9v1Z83C325jnahyIHJIg0=:AmazonSES
List-Unsubscribe: <http://links.recalldageorgegascon.org/e/encryptedUnsubscribe?_r=ee9ea3f1bxxxxxx293f144f7a906a1ec&_s=9b1a2b9d29afxxxxxb0c51972327ea7b&_t=voDrZMuMF0DGsxxxxxd-azFOhsAgIEGeLEDUpY0qLJ3DyD4XiiVQt04nBNs_eQDlEo-ZqVxE53zRn7w9jmhyhGR8H-PWE_NcVXuHmWPxE-sv-4EW1ftcvODq1xVXsEKcNoB-3P3fa7ctUpBzhFKTmAsaoF5I7ia8EwOZNc5QsLJM%3D>,<mailto:unsubscribe+4329428+5890382@unsubscribe.iterable.com>
X-Feedback-ID: 5890382:4329428:57170:iterable
X-Message-ID: 9b1a2b9d29af489a8b0c51972327ea7b
X-SES-Outgoing: 2022.05.26-23.251.255.195
Content-Length: 21232

Netflix dropped Season 4 of Stranger Things with a lot of horror. Looking through my fingers.

...still waiting for that £150.

Don't want to rub it in, but received mine last month on the 20th.

Glory?