RE: Annoying virus being mailed to me

Chris,

That's another one that will come to you from just about anywhere. If someone is infected and has your email address anywhere on their system, you'll get targeted. Here's the write up from Symantec... of interest is the section describing where the worm harvest email addresses from. The fact that you are getting them from varying IP addy's is because of the number of people who are infected.

http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.a@mm.h tml

mike heitz ** sr it manager ** UPSHOT
312-943-0900 x5190

-----Original Message-----

From: Chris Carter [mailto:chris.carter@ebunda.com] Sent: Friday, February 07, 2003 3:54 AM
To: security-basics@securityfocus.com
Subject: Annoying virus being mailed to me

Hi guys,

For the last two months or so I have been receiving emails with the I-Worm/Sobig virus attached about twice a day. My anti-virus sw protects me well so I am not infected in any way (nor has anybody else here). Initially, I used to ignore the messages and delete them; after a couple of weeks I decided to trace the source IP from the mail header and send complaint messages to the corresponding ISP. But the Bast**d keeps finding other IP's to mail me from. Messages come from big@boss.com. Is anyone else being targeted? Is this a common occurrence? Am I the only one?

Cheers!
Chris

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

---

Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.449 / Virus Database: 251 - Release Date: 27.01.2003   Received on Fri Feb 7 19:37:41 2003