Using !00000 to try to stop the spread of mass mailing viruses it not a 100%
cure all. In fact most of the newer viruses such as Klenz will also scan
your temporary internet files for e-mail address in the HTML files and only
randomly select address from your address book. Here is more information
about using the !0000

http://www.snopes2.com/computer/virus/quickfix.htm
Quoted from the site linked above..
This trick will work somewhat, but it's not the panacea it's presented to
be. Although the recommended action will help derail the spread of viruses
designed to do a "send all," it will not counter the many that randomly
select individual addresses from a user's address book or supplement
addresses harvested from that location with those found cached elsewhere on
the system. (This method also assumes that if the first entry in a list of
recipients is invalid, the message won't be sent to any of the recipients --
this is not necessarily true of all e-mail programs.) Faked entry or not,
those who correspond with users infected with those sorts of viruses will be
just as vulnerable as they ever were.

Enjoy...

Matt Barbian


-----Original Message-----
From: Stefan Smets [mailto:[EMAIL PROTECTED]]
Sent: Saturday, July 13, 2002 8:11 AM
To: Craig Greening; RCSE
Subject: Re: [RCSE] nice game crap (and how to avoid replication)


FWIW, there are quite some viruses that do this;
A nice trick to avoid a virus sending itself in a message to everyone in
your address-book is making an entry in your address-book like :

"!000000000  ANTI-VIRUS DON'T REMOVE"
and don't give a valid email-address to it; just leave the email-field
empty.

Most viruses will not be able to send a message to that "address" and will
"drop dead"; of course, you still have the virus yourself, but at least,
you're not replicating it to the rest of the world.

Stefan.

----- Original Message -----
From: "Craig Greening" <[EMAIL PROTECTED]>
To: "RCSE" <[EMAIL PROTECTED]>
Sent: Saturday, July 13, 2002 8:51 AM
Subject: [RCSE] nice game crap


> My pc decided to mail a virus to the group, sorry about that
> everyone. For some reason my AV software didn't catch it, checks
> clean now.
>
> Craig.
>
> RCSE-List facilities provided by Model Airplane News.  Send "subscribe"
and "unsubscribe" requests to [EMAIL PROTECTED]
>

RCSE-List facilities provided by Model Airplane News.  Send "subscribe" and
"unsubscribe" requests to [EMAIL PROTECTED]

RCSE-List facilities provided by Model Airplane News.  Send "subscribe" and 
"unsubscribe" requests to [EMAIL PROTECTED]

Reply via email to