On Friday, July 4, 2003, at 03:34 PM, k wrote:



In this beloved country people has begun to recieve .pif attachments from unknown senders and also it seems that this .pif has started to send out mails from a friend on a mac with an eudora addressbook -
ANYONE ?!?!????

No.


The From addresses on these emails are forged.

This is the Sobig virus, most likely, which has the virus disguised as a .pif file inside of a .zip file. The virus pulls e-mail addresses from the infected computer's Outlook address book, and any e-mail addresses it can find in <mailto::> tags in the Internet Explorer cache.

Look at the full headers of the e-mail and you'll see that the mail originated at a different ip address than where it says it came from. (You want to look at the earliest "Recieved: from" entry. That tells where the mail originated.)

There is NO WAY a Mac can be infected with these viruses, unless you are crazy enough to check your e-mail and browse the web with Outlook and IE in Virtual PC or something...

--
"Wherever you go, there you are." - B. Banzai, Ph.D.
Bruce Johnson



--
PowerBooks is sponsored by <http://lowendmac.com/> and...

 Small Dog Electronics    http://www.smalldog.com   | Enter To Win A |
 -- Canon PowerShot Digital Cameras start at $299   |  Free iBook!   |

Support Low End Mac <http://lowendmac.com/lists/support.html>

PowerBooks list info:   <http://lowendmac.com/lists/powerbooks.shtml>
 --> AOL users, remove "mailto:";
Send list messages to:  <mailto:[EMAIL PROTECTED]>
To unsubscribe, email:  <mailto:[EMAIL PROTECTED]>
For digest mode, email: <mailto:[EMAIL PROTECTED]>
Subscription questions: <mailto:[EMAIL PROTECTED]>
Archive: <http://www.mail-archive.com/powerbooks%40mail.maclaunch.com/>

Using a Mac? Free email & more at Applelinks! http://www.applelinks.com



Reply via email to