MacaFee and Trend offer a free bug scan and remove on line http://vil.nai.com/vil/stinger/ http://housecall.trendmicro.com/ Regards Mike Fenner Indium Corporation T: + 44 1908 580 400 M: + 44 7810 526 317 F: + 44 1908 580 411 E: [log in to unmask] W: www.indium.com Pb-free: www.Pb-Free.com -----Original Message----- From: TechNet [mailto:[log in to unmask]] On Behalf Of Brian Ellis Sent: Wednesday, September 10, 2003 7:07 AM To: [log in to unmask] Subject: Re: [TN] Notices Werner This is called spoof addressing and is a pest. The following is an extract from my latest article for "Microelectronics International": Another very nasty one of recent date is Sobig.F. This is a complex worm which not only replicates itself from an infected computer, it installs its own Trojan Horse. This can be used for any number of nefarious purposes and can even transmit password information to third parties. Even worse, it can seek updated versions of itself, so that it can evolve faster than the anti-virus systems can take care of them. Like many others, the replication uses multiple spoof 'From' addresses, so that there is no way of knowing the origin, should you be careless enough as to allow yourself to be infected. Even worse, it can use any one of a number of ports. Perhaps one of the more obvious manifestations is that the Trojan Horse transmits the infected site's IP number which becomes a "magnet" for spam mail: users apparently received many spams within a very short space of time, as well as infected attachments. The worst aspect is that Sobig.F had the fastest propagation rate of any virus, to date. What is amazing is that even organisations like the Swiss Federal Railways were taken down for over a day by this beastie." Brian Werner Engelmaier wrote: > Hi, > Are you all getting all these "failure notice", "Returned mail", > "Undeliverable message returned to sender", etc. about e-mails I have > never sent to addresses I have never heard of? This started about 4 or > 5 days ago. > > Regards, > Werner Engelmaier > > --------------------------------------------------- > Technet Mail List provided as a service by IPC using LISTSERV 1.8e To > unsubscribe, send a message to [log in to unmask] with following text in > the BODY (NOT the subject field): SIGNOFF Technet To temporarily halt > or (re-start) delivery of Technet send e-mail to [log in to unmask]: SET > Technet NOMAIL or (MAIL) To receive ONE mailing per day of all the > posts: send e-mail to [log in to unmask]: SET Technet Digest Search the > archives of previous posts at: http://listserv.ipc.org/archives Please > visit IPC web site http://www.ipc.org/contentpage.asp?Pageid=4.3.16 for additional information, or contact Keach Sasamori at [log in to unmask] or 847-509-9700 ext.5315 > ----------------------------------------------------- > > --------------------------------------------------- Technet Mail List provided as a service by IPC using LISTSERV 1.8e To unsubscribe, send a message to [log in to unmask] with following text in the BODY (NOT the subject field): SIGNOFF Technet To temporarily halt or (re-start) delivery of Technet send e-mail to [log in to unmask]: SET Technet NOMAIL or (MAIL) To receive ONE mailing per day of all the posts: send e-mail to [log in to unmask]: SET Technet Digest Search the archives of previous posts at: http://listserv.ipc.org/archives Please visit IPC web site http://www.ipc.org/contentpage.asp?Pageid=4.3.16 for additional information, or contact Keach Sasamori at [log in to unmask] or 847-509-9700 ext.5315 ----------------------------------------------------- ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: This email, its content and any files transmitted with it are intended solely for the addressee(s) and may be legally privileged and/or confidential. If you are not the intended recipient please delete and contact the sender by return and delete the material from any computer. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. Messages sent via this medium may be subject to delays, non-delivery and unauthorized alteration. This email has been prepared using information believed by the author to be reliable and accurate, but Indium Corporation makes no warranty as to accuracy or completeness. In particular, Indium Corporation does not accept responsibility for changes made to this email after it was sent. Any opinions or recommendations expressed herein are solely those of the author. They may be subject to change without notice. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: --------------------------------------------------- Technet Mail List provided as a service by IPC using LISTSERV 1.8e To unsubscribe, send a message to [log in to unmask] with following text in the BODY (NOT the subject field): SIGNOFF Technet To temporarily halt or (re-start) delivery of Technet send e-mail to [log in to unmask]: SET Technet NOMAIL or (MAIL) To receive ONE mailing per day of all the posts: send e-mail to [log in to unmask]: SET Technet Digest Search the archives of previous posts at: http://listserv.ipc.org/archives Please visit IPC web site http://www.ipc.org/contentpage.asp?Pageid=4.3.16 for additional information, or contact Keach Sasamori at [log in to unmask] or 847-509-9700 ext.5315 -----------------------------------------------------