[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Check the update from Microsoft.



On Wed, Mar 19, 2003 at 03:36:00PM -0500, Jeremy Gaddis wrote:
> Got this message in my Inbox today, and it appears that it
> was sent to a bunch of subscribers to debian-user.  It had
> an executable file attached, q157498.exe, which is, of course,
> a virus, if anyone had any doubts.
> 
> j.
> 
> --
> Jeremy L. Gaddis   <jeremy@gaddis.org>   <http://www.gaddis.org>
> 
> 
> 
> > -----Original Message-----
> > From: Ben van.Daalen [mailto:Ben.van.Daalen@leoburnett.nl] 
> > Sent: Wednesday, March 19, 2003 10:34 AM
[...]
> > debian-user20030316@thayer-boyle.com; 

I got one of those too. You'll note that my address was a one-time
datestamped one, not the one from my .sig. This suggests to me that
this virus propogates itself by harvesting addresses from the host
machine's inbox rather than from an addressbook. In all likelyhood,
the purported from address is probably another inbox address as well.

dt

-- 
Dave Thayer           | If trees could scream, would we be so cavalier about
Denver, Colorado USA  | cutting them down? We might, if they screamed all
dave@thayer-boyle.com | the time, for no good reason. - Jack Handey



Reply to: