Re: My email (Hotmail) is sending virii ("viruses") on my behalf!

From: Alun Jones [MS MVP] (alun_at_texis.com)
Date: 08/29/03


Date: Fri, 29 Aug 2003 03:58:04 GMT

In article <60e55da2.0308281847.68eb9032@posting.google.com>, jeezut@yahoo.com (Jeezut) wrote:
>Before you jump the gun and call me retarded, let me explain...

You aren't retarded - the administrators of those systems that are emailing
you the bounces, they're the retarded ones (or, more likely, they have a
brain, but didn't think to use it). Just like the people at the antivirus
companies that wrote the mail filters - they forgot to think about the
feature before they added / enabled it.

Every mail virus that you'll ever encounter (unless you go way back) picks
two addresses at random - puts one address in the "To" field of a new email,
and puts the other in the "From" field. Yes, that means that every virus
that these filters receive is lying about where it came from. The antivirus
guys know this, because they spend large amounts of their time analysing
what viruses do, and how to clean them up. They _know_ that they are
sending email to people who are not responsible for sending the virus on.
In any other field, we call that "spam".

I've tried convincing a few of them that this feature is stupid beyond
belief, but it's an uphill battle. Apparently their marketing department
like the extra advertising they get from all this email going out with their
name on it. Me, I view each incoming email from Antigen, Norton Antivirus,
RAV, etc as being a declaration of "our security experts think only so far,
and then they stop".

Alun.
~~~~

[Please don't email posters, if a Usenet response is appropriate.]

-- 
Texas Imperial Software   | Find us at http://www.wftpd.com or email
1602 Harvest Moon Place   | alun@texis.com.
Cedar Park TX 78613-1419  | WFTPD, WFTPD Pro are Windows FTP servers.
Fax/Voice +1(512)258-9858 | Try our NEW client software, WFTPD Explorer.


Relevant Pages

  • Re: what gives?? Hey Microsoft, HEL-LO....
    ... It's a virus, and as more people click on the attachment ... Take a programming course, and learn more about your system - eventually ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Why does Windows allow Worms?
    ... >>rather than any technical flaws, it would appear that the problem has ... So, to run this virus (and a huge number of people are, to judge by the ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
    (comp.security.misc)
  • Re: how to create new system restore point?
    ... >to use their skills in helping rather than creating viruses and victimizing ... Sadly, it takes relatively little skill to create a virus, certainly far ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
    (microsoft.public.security.virus)
  • Re: virus? and outlook address book
    ... You appear to be one of the earliest people to be infected by this virus. ... the number of these things that are beating down on my inbox, ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
    (microsoft.public.security.virus)
  • Re: W32.Swen mutating?
    ... >and the grammer is getting whacky. ... because someone's re-written the virus, or because the virus was originally ... Texas Imperial Software | Find us at http://www.wftpd.com or email ... Cedar Park TX 78613-1419 | WFTPD, WFTPD Pro are Windows FTP servers. ...
    (microsoft.public.security.virus)