At 11:49 AM 3/6/2004, you wrote:
>--- David Parenteau <kitfox_at_firstlight.net> wrote:
> > This virus, like just about every other email worm
> > these days, randomly selects an email address to
> > spoof from. This simply means that the person
> > who is infected has your email address somewhere in
> > their computer, whether it be a text file, address
> > book, or even html cache.
> >
> > That way people who get it might be dumb enough to
> > email you and say "Hey, Brandon! Quit sending me
> > stuff like that!" when you didn't send it at all,
> > thus keeping the real virus safe.
>
>Funny, I'm not infected, and I've got POP3 and SMTP
>blocked on my comp... So how does it send messages to
>people using my information, when I've no contacts on
>any POP3 client or Yahoo? :D Sounds more like a
>random email harvest thingy to me...
The worm, while running, searches on the computer it is on for any email
addresses in HTML files (Like your web cache), text, address books, etc,
and selects both a random To: and a random From: address from these
options. So, if you send Email to "Mike" and "Mike" gets this virus, his
computer will start sending email out as if it is from you, because the
virus sees your email address somewhere on his computer, and fakes it being
from you. This also means that people don't have any easy way of figuring
out that it came from "Mike", and so send you a message saying you have a
virus, which you don't, while Mike actually does, but doesn't get any
message warning him.
Received on Wed Mar 10 2004 - 12:19:32 CST