This kind of messages with "Details" subject, "Here is the file." body and
an attached .pif or .scr or .exe file are known mail worms (Netsky or Bagle,
I don't remember exactly, but I've read their description just today). If
one opens the attachment the virus installs itself in his mailer program and
starts replicating itself sending the same virus message to all the e-mail
address it founds in the computer. Often the sender of these messages is
faked. So it may be that someone have got the virus and sends out messages
using the known addresses as faked senders.
        I sometimes receive e-mail message on my account that appears to
have been sent from my own account and that obviously I never sent. A check
of the messages header details shows that they actually never originates
from my computer, they just use my addres that is publicly available in many
web pages and inside teh computers of people that corresponded with me. SMTP
protocol, that we use to send e-mail, was unfortunately developed when the
Internet was populated just by a group of scientists and there was no need
to implement strict autentication in the mail protocol. It's very easy to
send messages disguising himself for another identity.
        Fortunately the list cuts the attachments so we are protected by
these menaces, at least for what attains messages coming from it.

Best wishes,

Francesco

> -----Messaggio originale-----
> Da: Stewart McCoy [mailto:[EMAIL PROTECTED] 
> Inviato: marted� 7 giugno 2005 23.42
> A: Lute Net
> Oggetto: Details
> 
> Dear Richard et al,
> 
> I did not send the message below. Nor did I send an 
> attachment, which seems to have been intercepted by Dartmouth 
> College's anti-attachment software. It is worrying. Maybe 
> Wayne can explain what is going on.
> 
> Best wishes,
> 
> Stewart McCoy.
> 
> 
> ----- Original Message -----
> From: <[EMAIL PROTECTED]>
> To: <[email protected]>
> Sent: Tuesday, June 07, 2005 7:55 PM
> Subject: Re: Details
> 
> 
> > Here is the file.
> >
> > --
> >
> > To get on or off this list see list information at 
> > http://www.cs.dartmouth.edu/~wbc/lute-admin/index.html
> >
> 
> 
> 



Reply via email to