[NTLUG:Discuss] is this possible

Rick Matthews k5wls at verizon.net
Fri Aug 22 09:12:25 CDT 2003


> -----Original Message-----
> From: Jeff Demel
> 
> The sobig virus picks an address from the infected machine's 
> address book and uses it as the FROM address.  It is a windows-only 
> problem.
> 
> Unfortunately, someone you know apparently got nailed, because it 
> found your address in their address book.

Not necessarily the address book:
The Symantec site says that "The spoofed addresses and the Send To 
addresses are both taken from the files found on the computer."

Makes it a lot easier to understand that it doesn't need to be 
somebody you know.

I just went through this earlier this week when my extended family
(inlaws and outlaws) received an email containing the Bugbear
virus.  The email said it was from me. (I received a copy of it, too.)

Rick






More information about the Discuss mailing list