> The only list I am currently active on is this. While hard to believe > the most logical conclusion is that some gentoo-dev subscribers has
> been infected.
You neglect the spread mechanism here. Given that the worm forges it's
source address to a random value, the ONLY requirement to recieve an
infected email from somebody is that they have have at some point
recieved an email from you (either directly or via some mailing list)
in
the past, and they still have your email on their system.
Reading the virus description again I see that I missed a critival part. The virus does not use the victims smtp but rather one of 350 diffrent servers around the world, thus this may very well come from the same host.
Im sorry about the superflous list traffic.
/John
pgp00000.pgp
Description: PGP signature
