On Thursday 04 Sep 2003 10:15 pm, Heather/Femme wrote:Possible reasons for this kind of thing:
On Thu, 04 Sep 2003 08:08:15 -0300
"Angus Auld" <[EMAIL PROTECTED]> wrote:
I got an email message from newbie list that is infected w/ S o b i g . F.
Somebody on the list infected? Headers indicate a windows "lookout express 6" user.
The subject line was: "[newbie] Re: Your Application" and it was from: "[EMAIL PROTECTED]". The infected attachment was a file called "movie0045.pif".
FYI. Regards.
--Angus
heh cool I got that too..wondered if it had to do with an account I'd tried setting up earlier. Got confused cause I was trying to setup a yahoo acct..wondered if in my fried state of mind I'd tried to setup an MSN acct instead.
thx for the headsup. :D
Heather
What's really odd about this is that we are not all getting each of them, ifswim. I didn't get that one. Some didn't get the one I did.
1. The virus is not going through the list, and is spoofing the subject header as well as the address;
2. Some of us have better filters than others ;-)
In this case, I suspect 1. I have this list whitelisted in my procmail filters, so unless the university is killing the infected messages first, I should be getting them, and I haven't so far [knocks on wood].
Sir Robin
-- "There are other rules, but you'll find out what those are when you break them." - Blake's 7
Robin Turner IDMYO Bilkent Univeritesi Ankara 06533 Turkey
www.bilkent.edu.tr/~robin
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
