Re: lingo-l Hijacked e-mail
At 15:37 20.08.2003 -0400, Kerry wrote: Somebody has hijacked my old e-mail address, and virus-infected e-mails are being sent out, apparently from my e-mail. I think that current mail virus (or is it a worm?) sobig-F sends it's infected mails with a forged sender info which it picks randomly from the number of email adresses it finds on a infected outlook/windows address book. best regards Daniel Plaenitz [To remove yourself from this list, or to change to digest mode, go to http://www.penworks.com/lingo-l.cgi To post messages to the list, email [EMAIL PROTECTED] (Problems, email [EMAIL PROTECTED]). Lingo-L is for learning and helping with programming Lingo. Thanks!]
RE: lingo-l Hijacked e-mail
I think that current mail virus (or is it a worm?) It's a worm. sobig-F sends it's infected mails with a forged sender info which it picks randomly from the number of email addresses it finds on a infected outlook/windows address book. That's consistent with what I've seen. I've gotten infected e-mails that look like they're from people I know are clean. This is a nasty one. Cordially, Kerry Thompson [To remove yourself from this list, or to change to digest mode, go to http://www.penworks.com/lingo-l.cgi To post messages to the list, email [EMAIL PROTECTED] (Problems, email [EMAIL PROTECTED]). Lingo-L is for learning and helping with programming Lingo. Thanks!]
RE: lingo-l Hijacked e-mail
At 16:23 20.08.2003 -0400, you wrote: This is a nasty one. www.messagelabs.com/viruseye shows worldwide stats and displays them graphically. They have to adjust the scale every some hours ... best regards Daniel Plaenitz [To remove yourself from this list, or to change to digest mode, go to http://www.penworks.com/lingo-l.cgi To post messages to the list, email [EMAIL PROTECTED] (Problems, email [EMAIL PROTECTED]). Lingo-L is for learning and helping with programming Lingo. Thanks!]
Re: lingo-l Hijacked e-mail
On Wednesday, Aug 20, 2003, at 16:47 America/Chicago, Colin Holgate wrote: This is a nasty one. www.messagelabs.com/viruseye shows worldwide stats and displays them graphically. They have to adjust the scale every some hours ... I went there and it crashed my Netscape. I had to restart. Oh the irony. I got a blank frame in Safari. One can only assume the site's been tested in IE only, and probably built in FrontPage. -- WthmO [To remove yourself from this list, or to change to digest mode, go to http://www.penworks.com/lingo-l.cgi To post messages to the list, email [EMAIL PROTECTED] (Problems, email [EMAIL PROTECTED]). Lingo-L is for learning and helping with programming Lingo. Thanks!]
RE: lingo-l Hijacked e-mail
You have to disregard the from address. That's totally fakeable. The only thing trustworthy is the source IP address. We have separate accounts here (like [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], etc.). It's amusing to see our tech support account receive email from [EMAIL PROTECTED] with spam or virus in it. Obviously we're not sending this stuff to ourselves. Someone else halfway across the country or world has the email addresses and it's going out looking like it's FROM us and also TO us. FWIW, if everyone remembers we shifted to allowing only lingo-l members to post when we would occasionally get 1 spam every couple of weeks. It really annoyed everyone, so we made the member-only post requirement. Still, I have to review the quarantined messages looking for valid users using the wrong account. Gradually it moved to one spam a week, then maybe one spam a day. The other day I had one valid user problem, and I think some twenty spams. This is out of control. The amount of spams going to the list was exceeding the list activity itself for that day. Personally I get one or two HUNDRED a day. Some of them supposedly from ourselves! :) It's crazy. - Tab [To remove yourself from this list, or to change to digest mode, go to http://www.penworks.com/lingo-l.cgi To post messages to the list, email [EMAIL PROTECTED] (Problems, email [EMAIL PROTECTED]). Lingo-L is for learning and helping with programming Lingo. Thanks!]
Re: lingo-l Hijacked e-mail
People need to learn quickly that polymorphic virii are here to stay and they almost never actually look like who really got infected. roymeo At 03:37 PM 8/20/2003 -0400, you wrote: Hello all, Somebody has hijacked my old e-mail address, and virus-infected e-mails are being sent out, apparently from my e-mail. If you get anything from [EMAIL PROTECTED], delete it without even opening it. I am not using that address for outgoing e-mail, so it is not from me. The infected e-mail may even appear to be from the list. That's happened before--somebody recently forged a lingo-l message, purportedly from James Newton, with an infected attachment. It was fake in all respects--it didn't come from James, and it didn't come through the list. Tab runs a clean operation here--no attachments are sent through the list. Be wary. I've gotten about 20 infected e-mails today at my earthlink address. Cordially, Kerry Thompson [To remove yourself from this list, or to change to digest mode, go to http://www.penworks.com/lingo-l.cgi To post messages to the list, email [EMAIL PROTECTED] (Problems, email [EMAIL PROTECTED]). Lingo-L is for learning and helping with programming Lingo. Thanks!] [To remove yourself from this list, or to change to digest mode, go to http://www.penworks.com/lingo-l.cgi To post messages to the list, email [EMAIL PROTECTED] (Problems, email [EMAIL PROTECTED]). Lingo-L is for learning and helping with programming Lingo. Thanks!]
