TECHNET Archives

September 2003

TechNet@IPC.ORG

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Mike Fenner <[log in to unmask]>
Reply To:
Date:
Wed, 10 Sep 2003 08:28:33 +0100
Content-Type:
text/plain
Parts/Attachments:
text/plain (111 lines)
MacaFee and Trend offer a free bug scan and remove on line

http://vil.nai.com/vil/stinger/  http://housecall.trendmicro.com/


Regards

Mike Fenner

Indium Corporation
T: + 44 1908 580 400
M: + 44 7810 526 317
F: + 44 1908 580 411
E: [log in to unmask]
W: www.indium.com
Pb-free: www.Pb-Free.com



-----Original Message-----
From: TechNet [mailto:[log in to unmask]] On Behalf Of Brian Ellis
Sent: Wednesday, September 10, 2003 7:07 AM
To: [log in to unmask]
Subject: Re: [TN] Notices


Werner

This is called spoof addressing and is a pest. The following is an
extract from my latest article for "Microelectronics International":

Another very nasty one of recent date is Sobig.F. This is a complex worm
which not only replicates itself from an infected computer, it installs
its own Trojan Horse. This can be used for any number of nefarious
purposes and can even transmit password information to third parties.
Even worse, it can seek updated versions of itself, so that it can
evolve faster than the anti-virus systems can take care of them. Like
many others, the replication uses multiple spoof 'From' addresses, so
that there is no way of knowing the origin, should you be careless
enough as to allow yourself to be infected. Even worse, it can use any
one of a number of ports. Perhaps one of the more obvious manifestations
is that the Trojan Horse transmits the infected site's IP number which
becomes a "magnet" for spam mail: users apparently received many spams
within a very short space of time, as well as infected attachments. The
worst aspect is that Sobig.F had the fastest propagation rate of any
virus, to date. What is amazing is that even organisations like the
Swiss Federal Railways were taken down for over a day by this beastie."

Brian


Werner Engelmaier wrote:
> Hi,
> Are you all getting all these "failure notice", "Returned mail",
> "Undeliverable message returned to sender", etc. about e-mails I have
> never sent to addresses I have never heard of? This started about 4 or

> 5 days ago.
>
> Regards,
> Werner Engelmaier
>
> ---------------------------------------------------
> Technet Mail List provided as a service by IPC using LISTSERV 1.8e To
> unsubscribe, send a message to [log in to unmask] with following text in

> the BODY (NOT the subject field): SIGNOFF Technet To temporarily halt
> or (re-start) delivery of Technet send e-mail to [log in to unmask]: SET

> Technet NOMAIL or (MAIL) To receive ONE mailing per day of all the
> posts: send e-mail to [log in to unmask]: SET Technet Digest Search the
> archives of previous posts at: http://listserv.ipc.org/archives Please

> visit IPC web site http://www.ipc.org/contentpage.asp?Pageid=4.3.16
for additional information, or contact Keach Sasamori at [log in to unmask]
or 847-509-9700 ext.5315
> -----------------------------------------------------
>
>

---------------------------------------------------
Technet Mail List provided as a service by IPC using LISTSERV 1.8e To
unsubscribe, send a message to [log in to unmask] with following text in
the BODY (NOT the subject field): SIGNOFF Technet To temporarily halt or
(re-start) delivery of Technet send e-mail to [log in to unmask]: SET
Technet NOMAIL or (MAIL) To receive ONE mailing per day of all the
posts: send e-mail to [log in to unmask]: SET Technet Digest Search the
archives of previous posts at: http://listserv.ipc.org/archives Please
visit IPC web site http://www.ipc.org/contentpage.asp?Pageid=4.3.16 for
additional information, or contact Keach Sasamori at [log in to unmask] or
847-509-9700 ext.5315
-----------------------------------------------------

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

This email, its content and any files transmitted with it are intended solely for the addressee(s) and may be legally privileged and/or confidential. If you are not the intended recipient please delete and contact the sender by return and delete the material from any computer. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited.

Messages sent via this medium may be subject to delays, non-delivery and unauthorized alteration. This email has been prepared using information believed by the author to be reliable and accurate, but Indium Corporation makes no warranty as to accuracy or completeness. In particular, Indium Corporation does not accept responsibility for changes made to this email after it was sent. Any opinions or recommendations expressed herein are solely those of the author. They may be subject to change without notice.

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

---------------------------------------------------
Technet Mail List provided as a service by IPC using LISTSERV 1.8e
To unsubscribe, send a message to [log in to unmask] with following text in
the BODY (NOT the subject field): SIGNOFF Technet
To temporarily halt or (re-start) delivery of Technet send e-mail to [log in to unmask]: SET Technet NOMAIL or (MAIL)
To receive ONE mailing per day of all the posts: send e-mail to [log in to unmask]: SET Technet Digest
Search the archives of previous posts at: http://listserv.ipc.org/archives
Please visit IPC web site http://www.ipc.org/contentpage.asp?Pageid=4.3.16 for additional information, or contact Keach Sasamori at [log in to unmask] or 847-509-9700 ext.5315
-----------------------------------------------------

ATOM RSS1 RSS2