[Mailman-Developers] Re: New emerging virus/worm. Grr.

JT jtraub@dragoncat.net
Tue, 23 Apr 2002 10:58:12 -0700 (PDT)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 23 Apr 2002, Chuq Von Rospach wrote:
> This one has the possibility to get really ugly and nasty, folks,
> because it's hijacking addresses. Users can't depend on being yelled at
> by friends for being infected, because this new worm hides behind random
> return addresses. Which means the only thing you know is that the
> "person" sending you the email isn't the one infected, but someone who
> knows both of you is...

The return-path header however seems to be 'correct'.  I was able to use 
that to track back the actual infected user, even when it masqueraded as 
being from one of the lists I am on.  Hopefully this helps other people 
track this back as well and at least inform the correct person that they 
are infected.

- --JT

- -- 
[-------------------------------------------------------------------------]
[ Practice random kindness and senseless acts of beauty.                  ]
[ It's hard to seize the day when you must first grapple with the morning ]
[-------------------------------------------------------------------------]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8xaC1lZQYYI16LJQRAvoDAJ9OJXJR6CO/PhaZ/QJuv/r0zUuxJwCfYVbh
ld7T9CZ90dShV4JNHzyPxQ4=
=Y/i2
-----END PGP SIGNATURE-----