[ale] question about sobig

[Geoffrey]

John Marasco wrote:
> I agree although the IE cache could potentially have a lot more email 
> addresses (of complete strangers) than the address book (web mail 
> clients, web based newsgroups, etc...).

Again, you've got to focus on the average joe(joanne).  Very few of them 
do the web mail clients, web based newgroups.  Most of them are sitting 
there with their mindspring account using Outlook.

> In any case, I was trying to verify the original assumptions about the 
> bounced messages.  The point is that if you get "bounced messages" it 
> doesn't mean you have a virus and it could easily be a fools errand to 
> try and track down how your email got used because of the wide variety 
> of sources this virus gathers email from.

This is absolutely correct. I just received a bounce email telling me 
that an email I sent was infected.  It provided the following errors 
which are totally inconsistent with my environment:

From: <esoteric at 3times25.net>
To: ale at ale.org
.
.
X-Mailer: Microsoft Outlook Express 6.00.2600.0000

-- 
Until later: Geoffrey		esoteric at 3times25.net

The latest, most widespread virus?  Microsoft end user agreement.
Think about it...

_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale