Dailydave: Re: ello! =))

[Peter Wood <peterw () firstbase co uk>]

At 08:52 16/04/2004 +0100, Nexus wrote:
>> I'm no expert either, but according to the Sophos site it looks like a
>> Bagle worm. Interesting that it's using my address in the From field - I
>> run Sophos up to date, and just for good measure,  I just ran their Bagle
>> disinfector which says I don't have it. Any ideas, anyone?
>
>It's spoofed that's all - source IP is in Russia.
>Most mm@ viruses will snarf the users address book and internet cache for
>email addresses and use them for the spoofed mail from: address.   It just
>means that someone that has your email address on their system in some way
>has been infected.   I've had 2 sent to FD myself...
>
>Cheers,
>            JJ

Thanks JJ - I hoped it was something like that.

Pete
~{:-D

--------------------------------------------------------------------------------------------------------------------------------
*** Come and visit our stand number 614 at Infosecurity, Olympia, 27th-29th 
April ***
*** Free Tickets available from: 
http://www.fbtechies.co.uk/exhibitions.shtml ***
--------------------------------------------------------------------------------------------------------------------------------
Peter Wood FBCS CITP MIMIS MIEEE
Chief of Operations
First Base Technologies
+44 (0)1273 454525
www.fbtechies.co.uk
www.white-hats.co.uk

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave