Virus question

[silencio]

Has anyone seen a virus that replicates itself by sending to one address in a users address book, and using another address from the address book in the 'from' field?

[edball]

I've seen a lot of them that do that.

[kato2274]

Has anyone seen a virus that replicates itself by sending to one address in a users address book, and using another address from the address book in the 'from' field?
sounds like what we've been getting hammered the past 2 days and it hasn't been fun at all.
http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.c@mm.html

[silencio]

All of the ones I've seen lately that use their own smtp server generate a random 'from' address. Damn samspade.org appears to be gone...

[silencio]

sounds like what we've been getting hammered the past 2 days and it hasn't been fun at all.
http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.c@mm.htmlThat looks like it. Wonder who the hell has it... Must be at least two degrees of seperation since I know the ip pools of everyone in my address book...
I hate the forward button.

[geoscomp]

That looks like it. Wonder who the hell has it... Must be at least two degrees of seperation since I know the ip pools of everyone in my address book...
I hate the forward button.


And just to make it more fun..these viruses can also copy any email address it finds..even those in cached webpages..to use in the from field

[Ya_know]

This one's had me running raggedy all week. I don't have any virus's imbedded in my network, I am confident that ETrust 7 is doing exactly what it was designed to do, and verified it about 100 times. But I'll be damned if 15% of my people keep getting messages from email servers around the country talking about blocked viruses that “they” sent.

It gets hard to explain email spoofing ten times a day, especially when I still don't have a full grasp on it!

[silencio]

This one's had me running raggedy all week. I don't have any virus's imbedded in my network, I am confident that ETrust 7 is doing exactly what it was designed to do, and verified it about 100 times. But I'll be damned if 15% of my people keep getting messages from email servers around the country talking about blocked viruses that “they” sent.

It gets hard to explain email spoofing ten times a day, especially when I still don't have a full grasp on it!
Yeah, I hate that ****. It's a pain in the *** when you get a bunch of "delivery failed" emails when someone is spoofing you. ..another arguement for the elimination of anonymity on the internet.