Great Circle Associates List-Managers
(April 2002)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: New emerging virus/worm. Grr.
From: JT <jtraub @ dragoncat . net>
Date: Tue, 23 Apr 2002 10:58:12 -0700 (PDT)
To: list-managers @ greatcircle . com
Cc: mailman-developers @ python . org
In-reply-to: <B8EAE2E3 . 2BC13%chuqui @ plaidworks . com>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 23 Apr 2002, Chuq Von Rospach wrote:
> This one has the possibility to get really ugly and nasty, folks,
> because it's hijacking addresses. Users can't depend on being yelled at
> by friends for being infected, because this new worm hides behind random
> return addresses. Which means the only thing you know is that the
> "person" sending you the email isn't the one infected, but someone who
> knows both of you is...

The return-path header however seems to be 'correct'.  I was able to use 
that to track back the actual infected user, even when it masqueraded as 
being from one of the lists I am on.  Hopefully this helps other people 
track this back as well and at least inform the correct person that they 
are infected.

- --JT

- -- 
[-------------------------------------------------------------------------]
[ Practice random kindness and senseless acts of beauty.                  ]
[ It's hard to seize the day when you must first grapple with the morning ]
[-------------------------------------------------------------------------]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8xaC1lZQYYI16LJQRAvoDAJ9OJXJR6CO/PhaZ/QJuv/r0zUuxJwCfYVbh
ld7T9CZ90dShV4JNHzyPxQ4=
=Y/i2
-----END PGP SIGNATURE-----




References:
Indexed By Date Previous: Re: New emerging virus/worm. Grr.
From: "John R Levine" <johnl @ iecc . com>
Next: Warning: nasty variant of this new virus.
From: Chuq Von Rospach <chuqui @ plaidworks . com>
Indexed By Thread Previous: Re: New emerging virus/worm. Grr.
From: "John R Levine" <johnl @ iecc . com>
Next: Re: New emerging virus/worm. Grr.
From: Paul Hoffman / IMC <phoffman @ imc . org>

Google
 
Search Internet Search www.greatcircle.com