RE: virus: Appeal for advice

From: Blunderov (squooker@mweb.co.za)
Date: Tue Sep 02 2003 - 12:25:00 MDT

  • Next message: Calvin Ashmore: "RE: virus: Minimal belief set"

    Thank you Rhinoceros! Apparently all that header stuff is not nearly as
    much Greek to you as it is to me :) Having thought about what you say, I
    have decided to stop worrying about whether I am an oft-recurring
    address in US military address books, which is also quite a weight off
    my mind. Probably, it seems to me, I can continue to leave my cell phone
    on.

    Best Regards
    Blunderov

    -----Original Message-----
    From: owner-virus@lucifer.com [mailto:owner-virus@lucifer.com] On Behalf
    Of rhinoceros
    Sent: 02 September 2003 08:03 PM
    To: virus@lucifer.com
    Subject: RE: virus: Appeal for advice

    [Blunderov]
    I have been getting a lot of mail returned to me as undeliverable. The
    trouble is I never sent out the mail which is being returned to me. Some
    mail is entitled 'that movie', a title which I have never used, some is
    entitled 'my details' which IS a title I have used sometimes in my
    former scambaiting activities.

    <snip>

    [rhinoceros]
    No need to worry, Blunderov. We all receive them these days.

    Someone who had your e-mail address in their address book was infected
    by a virus. Then the virus started sending out infected e-mails to
    addresses it found there, using your own address, which was also found
    there, as a return address ("From:") .

    Some of these emails were sent to addresses which were no longer valid.
    So, those messages were "returned" to you as undelivered, because they
    appeared as sent by you.

    And don't worry about looking bad. One can easily see in the headers
    that the "From:" address was not really the address from which they were
    sent from.

    If you are still curious about the route this message followed, you can
    follow the "Received from" "by" lines, starting from the last one and
    going upwards. Keep in mind that some of the bottom "Received from" "by"
    lines can also be fake. 

    ----
This message was posted by rhinoceros to the Virus 2003 board on Church
of Virus BBS.
<http://virus.lucifer.com/bbs/index.php?board=54;action=display;threadid
=29195>
---
To unsubscribe from the Virus list go to
<http://www.lucifer.com/cgi-bin/virus-l>
---
To unsubscribe from the Virus list go to <http://www.lucifer.com/cgi-bin/virus-l>

    This archive was generated by hypermail 2.1.5 : Tue Sep 02 2003 - 12:26:35 MDT