Re: ATTN TOMSTDENIS Re: "New Microsoft Patch" == virus

From: Kelsey Bjarnason (nitpick@xxnospamyy.telus.net)
Date: 04/10/03 

From: Kelsey Bjarnason <nitpick@xxnospamyy.telus.net>
Date: Thu, 10 Apr 2003 20:25:47 GMT

In article <v99k3f1ec2qhf8@corp.supernews.com>,
davidallenwilson@hotmail.com says...
> Dear Mr. Tom St. Denis:
> I am receiving rather annoying emails which include your email
> address on the list concerning a supposed "Microsoft Patch", which is
> nothing but a virus. Please, if you can, do a virus scan your computer,
> because this is repeatedly being emailed to me with your name on it.
> Sincerely,
> David A. Wilson

Simple pseudocode:

  select sender at random from address book

  for each person in address book
    if person != sender
      compose message to person
      send message
      delete message from "sent items"
    endif
  endfor

Voila; your system, running such a script, just sent out 200 e-mails,
each of which claims to have been sent by Tom (or whomever is randomly
picked) and unless you're paying attention when it happens, you may not
even know about it. Heck, with a slightly less stupid script, it could
run entirely "silently" in the background and you'd never be aware of
it.

Welcome to the new crop of mail viruses.

Relevant Pages

  • Re: ATTN TOMSTDENIS Re: "New Microsoft Patch" == virus
    ... David Wilson wrote: ... > Dear Mr. Tom St. Denis: ... Please, if you can, do a virus scan your ... merely happens to have Tom in his addressbook, ...
    (sci.crypt)
  • Re: security with OE preview question
    ... Tom, if you'll bear with me, I have a couple item about your ... virus present and tells me where it's at. ... It is not opening an e-mail that infects your ... Outlook Express has become more and more secure. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Bizzarre pattern
    ... What I meant was with the reinstated data back on the PC, ... look for the secondary signs of infection (registry changes/strange .dll's ... Change' boos' to 'bos' in address to email directly "Tom" wrote in message ... Was it just that I had>>> opened the file the first time, when the virus was shown to be infected ...
    (microsoft.public.security.virus)
  • Re: security with OE preview question
    ... > I have a reason for all this doggerel; ... > virus present and tells me where it's at. ... It is not opening an e-mail that infects your ... > Great website, Tom!! ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Quick Norton AV question
    ... O'Reilly, Tom wrote: ... >Since we're taking Norton here maybe someone can help me. ... >Ed 7.51 on my clients and I have certain clients that always seem to have a ... >status of virus found in SSC. ...
    (Focus-Microsoft)
Quantcast