Re: w32.mimail.a@mm Question

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

hello,

Its possible an internal machine has been compromised, however the worm is also capable of forging email addresses You can get more info on:
http://securityresponse.symantec.com/avcenter/venc/data/w32.mimail.a@mm.html

You can attempt to find the source Ip through the email headers, allthough you shouldnt be surprised if these are faked aswell.

Hope that clarifies a bit.

• --Daan van de Linde Network Administrator

On Tue, 5 Aug 2003, Colin van Niekerk wrote:

> Date: Tue, 5 Aug 2003 09:19:14 +0200
> From: Colin van Niekerk <colin@jhbchev.co.za>
> To: focus-virus@securityfocus.com
> Subject: w32.mimail.a@mm Question
>
> Hi all
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (FreeBSD)

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

iD8DBQE/L/Q6MONMd70sQ4gRApUoAJ4q6IYawMAsOTjnLFk5mFkHHcXk2QCfSq7H iVFAg8x7n0uT2/QhN27R/p8=
=7mGQ
-----END PGP SIGNATURE-----