Re: Can Virus create contents of a mail on its own?

From: N. Miller (nsm_at_blackhole.aosake.net)
Date: 02/26/04


Date: Thu, 26 Feb 2004 06:13:06 -0800

In article <216b01c3fc3f$901bdc30$a101280a@phx.gbl>, subbiah@hub.nic.in
says...
> I have received a number of mails with the sender's
> address known to me. The sender says that some of the
> mails are not sent by him. After preliminary
> investigation it has been concluded, "the particular IP
> address was infected with viruses which can generate mails
> automatically based on the information available in the
> address book and the contents of the hard disk and for the
> subject and content the virus uses whatever information is
> available in the hard disk."
>
> While I agree that virus can create mails by selecting
> addresses from the address book and copy the contents of a
> mail, I do not agree that virus can generate mails
> automatically by picking contents from the hard disk of a
> particular system. You comments please.

You would be wrong. A virus can pick any email address it finds, anywhere on
the HDD, and use it. Both as a sender address, and as a destination. If a
virus can pick out email addresses, why wouldn't it be able to pick out
random text and insert it in the message body? One action is the same as the
other; manipulating bits is all that it is doing, either way. A virus can
even install its own SMTP engine, and send itself directly from the infected
computer, bypassing the normal ISP SMTP server used by the infected
computer.

To see what a virus can do, check on any of the anti virus vendor web sites;
look up for Swen and MyDoom and read what the AV people have learned about
them.

-- 
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint


Relevant Pages

  • Re: Unangekuendigter, nicht konfigurierbarer Zwangsvirenschutz von GMX-FreeMail-Accounts
    ... da sie einen Virus enthält. ... Transports schaden anrichten, ... Oder willst du verschlüsselte Mails gar nicht scannen? ... Der "Transporteur" ist zunächst mal ein Dienstleister, ...
    (de.soc.recht.datennetze)
  • Re: Error letter - getting e mails back i never sent
    ... >from e mails I never sent. ... >to use your machine as a spam sender without you knowing. ... "Your Email Had A Virus" notices will send them to the wrong system, ... The virus sends an email with EXE ...
    (microsoft.public.inetserver.iis.security)
  • Re: Zafi.B - Cannot find infected PC - Need some help
    ... These mails were all sent to different adresses of our ... Try our new virtual VoiceMessage Empire! ... > I was quite sure that this virus is faking the senders adress, ... > This happened everyday since tuesday with about 1500-2500 mails a day. ...
    (microsoft.public.security.virus)
  • Re: Norten Antivirus
    ... Antivir schlägt spätestens dann Alarm und blockt den Zugriff, ... ACK! ... Mails gelöscht, als ein Virus in einem Anhang bei mir aufschlug und die ... Einstellung auf Virus löschen war. ...
    (microsoft.public.de.german.windowsxp.sonstiges)
  • Re: Can Virus create contents of a mail on its own?
    ... I don't remember the name of the virus, ... |> While I agree that virus can create mails by selecting ... They harvests addresses ... Most worms ...
    (microsoft.public.security.virus)