Right but you have to look at the headers not the sender. I am pretty sure that
Hansen is our current guy given the pattern of senders. I am trying to get him.
http://www.jmu.edu/computing/security/info/klez.shtml#complaint
Runner Triathlete News wrote:
> I believe that the virus takes addresses
f Runner Triathlete
> News
> Sent: Thursday, August 21, 2003 1:47 PM
> To: Martin J. Dixon; [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject: Re: t-and-f: SoBig Virus culprit?
>
> I believe that the virus takes addresses from the infected computer's
> address book and inse
spoofed.
L
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Runner Triathlete
News
Sent: Thursday, August 21, 2003 1:47 PM
To: Martin J. Dixon; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: Re: t-and-f: SoBig Virus culprit?
I believe that the virus takes
I believe that the virus takes addresses from the infected computer's
address book and inserts them into the e-mail as the sender.
So this person may not be the person with the infected computer, but rather
his e-mail address is in the address book of someone else who does have the
virus.
Of cour
