[prev in list] [next in list] [prev in thread] [next in thread] 

List:       dailydave
Subject:    Re: [Dailydave] ello! =))
From:       Peter Wood <peterw () firstbase ! co ! uk>
Date:       2004-04-16 8:33:09
Message-ID: 6.0.3.0.2.20040416090058.0406d0c8 () pop3 ! officemail ! easynet ! co ! uk
[Download RAW message or body]

At 08:52 16/04/2004 +0100, Nexus wrote:
 >> I'm no expert either, but according to the Sophos site it looks like a
 >> Bagle worm. Interesting that it's using my address in the From field - I
 >> run Sophos up to date, and just for good measure,  I just ran their Bagle
 >> disinfector which says I don't have it. Any ideas, anyone?
 >
 >It's spoofed that's all - source IP is in Russia.
 >Most mm@ viruses will snarf the users address book and internet cache for
 >email addresses and use them for the spoofed mail from: address.   It just
 >means that someone that has your email address on their system in some way
 >has been infected.   I've had 2 sent to FD myself...
 >
 >Cheers,
 >            JJ

Thanks JJ - I hoped it was something like that.

Pete
~{:-D

--------------------------------------------------------------------------------------------------------------------------------
                
*** Come and visit our stand number 614 at Infosecurity, Olympia, 27th-29th 
April ***
*** Free Tickets available from: 
http://www.fbtechies.co.uk/exhibitions.shtml ***
--------------------------------------------------------------------------------------------------------------------------------
 Peter Wood FBCS CITP MIMIS MIEEE
Chief of Operations
First Base Technologies
+44 (0)1273 454525
www.fbtechies.co.uk
www.white-hats.co.uk


[prev in list] [next in list] [prev in thread] [next in thread]