Mailinglist Archive: opensuse-security (570 mails)

< Previous Next >
Re: [suse-security] Hi
  • From: "Gerry Doris" <gdoris@xxxxxxxxxx>
  • Date: Mon, 19 Jan 2004 14:47:14 -0500 (EST)
  • Message-id: <39328.129.80.22.143.1074541634.squirrel@xxxxxxxxxxxxxxx>
>> Philippe Vogel wrote:
>> >>Test =)
>> >>rdlfhqs
>> >>--
>> >>Test, yep.
>> >
>> >
>> > What's up with this?
>> > Is there a poeml@xxxxxxx?
>>
>> Yes, it is - somewhere in the Security Team, but, if the message has
>> poeml@xxxxxxx as sender,doesn't mean that either he is infected or that
>> he sent that infected message. This is the main spreading method used by
>> the internet worms - collects email addresses and spread using those
>> email addresses as senders.
>> So, don't blame poeml :)
>
> No, poeml (apache1/2) will in fact not use m$ products :-)
> In the headers of the original mail you cannot see the recipient, because
> it's been forwarded to the list.
>
>
> Philippe

This virus was picked up by F-Prot, Trend and ClamAV on my system. It was
the Worm_Bagle virus which spoofs the sender address. "So don't blame
poem1 :)" is correct!

Gerry

< Previous Next >
Follow Ups