[Sca-cooks] serious virus alert

lilinah at earthlink.net lilinah at earthlink.net
Fri Jun 7 09:53:12 PDT 2002


The current virus spoofs addresses - it takes an address from the
infected person's Outlook Express Address book and plugs it into the
 From line. But if you look at the actual sender (not always visible
if you have reduced headers), you'll see it came from someone else.
So the name in the From line of a message is NOT the sender.

And it chooses a subject line from something that already exists on
the computer - a file of some sort, or a previous e-mail. So the
Subject is, well, not the subject.

It also tucks itself into all sorts of files. I've received files
containing the virus with the following extensions: .exe, .wav, .jpg,
.pif, .scr, and no doubt more that i've forgotten.

So just 'cuz a message said it came from this list and/or a
particular person, doesn't mean it did. You need to examine the
headers in detail.

Heck, i even got the virus from "myself". It was pretty funny. I have
a Mac and i don't use Outlook Express or Explorer, so i cannot
infected by this virus, and i can assure you that if i did, i
wouldn't be e-mailing it to myself...

I even got an e-mail putatively from MicroSoft with the virus attached :-)

Anahita



More information about the Sca-cooks mailing list