Re: MS mail bombs
On Sat, Sep 20, 2003 at 02:35:02AM -0400, jbrice_@excite.com wrote:
> The return path is the actual email address of the infected
> victim/sucker.
Are you sure? This makes absolutely no sense based on the samples I'm
seeing. For example, "From xydnxnyhfdi_oysror@news.ms.com", "Received:
from gilead.media4.pl".
> Ehem! I write them an email telling them that they need to update and
> run their antivirus software and where to get the swen removal tool if
> they don't have antivirus software. I also tell them where to get real
> MS updates.
I think you might just be adding to the noise here.
Cheers,
--
Colin Watson [cjwatson@flatline.org.uk]
Reply to: