Re: Doom virus: (Upon posting)

["Joel R. Helgeson" <joel () helgeson com>]

1) It spoofs the from: field - therefore it could show as coming from
anyone.
2) If someone opens the virus, it will propegate to all addresses in the
victims address book. If FD is in your address book, it'll send a copy to
the list - which has happened several times.

Joel R. Helgeson
Director of Networking & Security Services
SymetriQ Corporation

"Give a man fire, and he'll be warm for a day; set a man on fire, and he'll
be warm for the rest of his life."
----- Original Message ----- 
From: "Remko Lodder" <remko () elvandar org>
To: "Full-Disclosure" <full-disclosure () lists netsys com>
Sent: Tuesday, January 27, 2004 6:12 AM
Subject: [Full-disclosure] Doom virus: (Upon posting)


> Dudes,
>
> are you willing not to post the virusses to the mailinglist itself?
> If people do have them and want to have them contact eachother offlist.
>
> My scanner reports emails as virusses from fd now
>
> tia,
>
> --
>
> Kind regards,
>
> Remko Lodder
> Elvandar.org/DSINet.org
> www.mostly-harmless.nl Dutch community for helping newcomers on the
> hackerscene
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html