Re: [cobalt-users] <Sun and Raq and the> Virus email

["Graeme Fowler" <graeme.f@xxxxxxxxxxxxxxx>]

Brian wrote:
> Someone *HAS* been targeting individual subscribers of mailing lists
with
> this virus.
>
> On another list that I'm subscribed to, every person who ever made a
posting
> to the list personally received a copy of the mentioned virus.  The
sender
> even went as far as to munge the headers and make it look like the
email
> originated from the mailing list.

This virus has a number of available 'plugins', one of which allows it
to send itself to everyone in your address book. Outlook (and Express)
have the option to harvest email addresses as you receive them, so it's
not entirely unfeasible that someone has that option set and also has
the virus.

It's easy enough to tell where it came from anyway, as the headers still
contain the senders' IP address. And the infected messages generally
follow a genuine message (although the plugin nature of the virus make
sit possible to subvert even this).

It's not just here - it's a massively prevalent virus right now,
although thankfully not as automatic as the recent variations on the
Love Bug.

*If* however a member of the list really is targetting list members, I
would be very careful. We've already seen just how litigious certain
list members can be in recent threads...

I stand by my previous advice. Regardless of where it comes from; get
yourself a reputable anti-virus program and keep it up to date. And
never open unsolicited attachments. And if you use your own RaQ for
email, consider installing a procmail filter to trap mail from
'hahaha@xxxxxxxxxxx' and send it to /dev/null.

Graeme