[Full-Disclosure] Infections

["Jos Osborne" <Jos@meltemi.co.uk>]

Okay - I think someone on here's infected. Within a couple of hours of my 
address first appearing on this list, I got the following:


----------------------------------------------

Undeliverable: Delivery Status Notification (Failure)

Your message did not reach some or all of the intended recipients.

      Subject:  Delivery Status Notification (Failure)
      Sent:     27/01/04 14:17

The following recipient(s) could not be reached:

      leo@twkempton.co.uk on 27/01/04 14:30
            The e-mail account does not exist at the organization this message 
was sent to.  Check the e-mail address, or contact the recipient directly to 
find out the correct address.
            <kempton.twkempton.co.uk #5.1.1>

      mailbox@twkempton.co.uk on 27/01/04 14:30
            The e-mail account does not exist at the organization this message 
was sent to.  Check the e-mail address, or contact the recipient directly to 
find out the correct address.
            <kempton.twkempton.co.uk #5.1.1>

----------------------------------------------


My system clock was reading 14:27 at the time I recieved this - an ever so 
slight discrepancy...
From the reports I've been getting from users it looks like the virus is 
spoofing the sent address with a randomly chosen address from the host's 
address list.

Jos

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html