This virus spoofs the "From:" email address to disguise where it's really
coming from. It can pick up an email address from darn near anywhere,
including Web pages that someone has looked at (it scans HTML files, among
other things). So if you have any kind of Web presence, you can appear as
the sender of the email. I've been getting a fair number of messages back as
undeliverable when I never sent such a message. The best thing we can do is
run a good AV package and don't open any suspicious attachments that do get
through.
My current SysAdmin is of the opinion that the AV product from Kaspersky
Labs is the best (also the most expensive, unfortunately), and he has
actually done tests of the various products, so I trust his opinion.
http://www.kaspersky.com/
The McAfee Web site has a particularly thorough writeup on the SoBig virus.
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100561
> -----Original Message-----
> From: owner-datsun-roadsters@autox.team.net
> [mailto:owner-datsun-roadsters@autox.team.net]On Behalf Of Andy Pal
> Sent: Wednesday, August 20, 2003 9:45 AM
> To: datsun-roadsters@autox.team.net
> Subject: Email "bugs"
>
>
> I've been getting spammed for 2 days now with the
> "new" email bug (lots of variations of it). If anyone
> has openned an attachment to any email which contains
> the text line, please scan your system:
>
> "Please see the attached file for details."
>
> The title of the email is either "thank you", "your
> application" etc...
>
> I think a few folks on the list have this bug and
> have unknowingly been forwarding it.
>
> My firewall "nukes" the attachment, but the balance
> of the email gets through, and lots of it too!
>
> Thanks,
> Andy
/// datsun-roadsters@autox.team.net mailing list
/// Archives at http://www.team.net/archive
|