I got this, too, and replied to the admin@x... address that I 
thought it was a virus or work spoofing the address culled from 
someone of us whose machine(s) is/are infected. It is usually my 
policy to notify the address spoofed. Unfortunately is almost 
impossible at this point to close out these infections unless the 
machines of all list members are disinfected. As someone on a lot of 
lists, I am now inundated daily with this abominable horse puckey.

Ciao,
Rex

At 8:08 AM +0000 3/3/04, Paul Sumner Downey wrote:
>i assumed that this is yet another virus ?
>the attachment is a Zip file containing a (presumably windows) executable
>:-o
>
>Paul
>
>-----Original Message-----
>From: administration@x... [mailto:administration@x...]
>Sent: 03 March 2004 01:28
>To: xml-dev@l...
>Subject: [xml-dev] E-mail account security warning.
>
>
>Dear user, the management  of  Xml.org mailing system wants to  let you
>know that,
>
>Your e-mail account will  be disabled because of improper  using in  next
>three days, if you are still wishing to use it, please, resign your
>account information.
>
>For more information see  the attached file.
>
>In order to read the attach you have  to use the following password: 37821.
>
>Sincerely,
>    The Xml.org team                              http://www.xml.org
>
>
>
>-----------------------------------------------------------------
>The xml-dev list is sponsored by XML.org <http://www.xml.org>, an
>initiative of OASIS <http://www.oasis-open.org>
>
>The list archives are at http://lists.xml.org/archives/xml-dev/
>
>To subscribe or unsubscribe from this list use the subscription
>manager: <http://www.oasis-open.org/mlmanage/index.php>


-- 
Rex Brooks
GeoAddress: 1361-A Addison, Berkeley, CA, 94702 USA, Earth
W3Address: http://www.starbourne.com
Email: rexb@s...
Tel: 510-849-2309
Fax: By Request