[thelist] A powful tool

Frank framar at interlog.com
Sun Jul 21 04:48:02 CDT 2002


At 09:13 AM 7/21/2002 +0200, you wrote:
>you can bet on it...
>"A  powful tool" is one of the many Klez.h generated subject lines.
>Which also means that the "from" field picked by the list software from
>the infected message is definitely fake, randomly picked on the infected
>machine spreading the worm


I had been offlist for a couple of months, but here's something I learned:
Some of the Klez worms look into the Explorer cache for email addresses and
use those. Most of the innumerable ones I've received have often had
'techie' titles. I'm guessing that someone had been browsing TheList
archives, which of  course keep our sigs, often with email addresses.
Seeing as I've posted more than once, it seems a logical idea that it may
have been from someone browsing them. A member? Or someone from a search
engine? Can't tell. Thus explaineth my current sig.




--
This message and any attachment it may have has been found free of viruses
before sending. Viral contagion is on the rise and Microsoft systems are
particularly vulnerable. Our responsibility as good Internet citizens is to
ensure that we prevent transmitting viruses by keeping our own machine
safe.  Please see the following article:

http://www.frankmarion.com/VirusPrimer.html

Frank Marion
framar at interlog.com






More information about the thelist mailing list