[Namron] Antigen Notification:Your email message was blocked by the Fluke Virus Wall

mikea mikea at mikea.ath.cx
Thu Oct 17 18:57:07 PDT 2002


On Thu, Oct 17, 2002 at 08:47:03PM -0500, Grimmie wrote:
> I did a full scan and no virus here. I looked at the sent email to the list
> and there was no attachments on it either? Any posably way to send it to me
> so I can check it out?

Almost certainly sent by LEZ or BugBear or some such.

Typically, they're sent with forged headers, with the "From:"
address set to someone in the addressbook of the infected box,
and sent to everyone else in the addressbook, web cache, and
every other file that has anything that looks like an Email
address.

And lots of clueless antivirus software sends the gripe to the
address in the "From:" header, which is forged, instead of to the
owner of the infected box.

Damnation! This is what I do in my _day_ job. I hate hate hate
virus and worm writers!

--
Mike Andrews	/	Michael Fenwick 	Namron, Ansteorra
mikea at mikea.ath.cx
Tired old music Laurel since 1987



More information about the Namron mailing list