Hi, I made the following experiment: I created an image of windows and ran it under a virtual system (KVM on Linux.) This lets me see any changes that occur on the disk when windows is running.
I saved the original image before starting as: windows.img.orig I then emailed to my yahoo account email from a google account an email with the following lines: from google from google from google from google from google from google from google from google from google from google from google from google from google from google from google from google from google from google I then went into the windows system and read my yahoo email. The next thing I did was to shutdown the windows virtual system and store a copy of the windows new image now named: windows.img.after_recieveing Then I started the windows again and wrote 4 emails containing the following lines in my yaooh email account: Sending from Yahoo sending from Yahoo Sending from Yahoo sending from Yahoo Sending from Yahoo sending from Yahoo Sending from Yahoo sending from Yahoo Sending from Yahoo sending from Yahoo Sending from Yahoo sending from Yahoo Once these emails where sent I shudown the windows system and saved he image as:windows.img.after_sending I now did a search for the string : "from google from google" in the images and found it plus my gmail signature which shows the incoming email was stored in the image windows.img.after_recieveing and could be read. However the text "Sending from Yahoo" cannot be found in any of the images specifically : windows.img.after_recieveing. Conclusions: Incoming email normally gets stored on the disk ( I assume in the cache) Outgoing email normally does not. ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
