[W124] price_20-Dec-2006

[Carl-Inge Svingeseth]

Is there possible to send files attached? I don't think so. I believe that
the virus faked the sender's adresse to trick you to believe it's a mail
from a trusted source. Viruses can find mail and mailadresses on your
computer and use these for its own purposes as it wants. 

But be glad your 'puter found virus, Its when you don't notice anything it
gets dangerous ;)

And for the mac users: Virus has dignity too, they stay away from macs ;P
hehe. Just kidding :D

-----Original Message-----
From: w124list-bounces at mbcoupes.com [mailto:w124list-bounces at mbcoupes.com]
On Behalf Of Frank Smyth
Sent: 21. desember 2006 09:09
To: Steve Nervig; W124 CE Coupes and Convertibles
Cc: Satish Tummala; w124list-owner at mbcoupes.com
Subject: Re: [W124] price_20-Dec-2006

Er... no, it certainly didn't come from me. So if I'm reading this right, a
Windows user sent the Windows virus from a Windows PC. Well, that certainly
helps everyone.

Summary: an email was distributed via the list that contained a virus. Don't
open it.

-----Original Message-----
From: Steve Nervig [mailto:dakota at mac.com]
Sent: 21 December 2006 02:33
To: W124 CE Coupes and Convertibles
Cc: Frank Smyth; Satish Tummala; w124list-owner at mbcoupes.com
Subject: Re: [W124] price_20-Dec-2006

Well, Frank, I believe you when you say it had a virus payload
attached. But, it was not sent from me or by me. It was sent from
someone else's computer (an infected Windows computer; read my
original message) that spoofed my email address and probably many
other persons in the infected computer's Address book.

You can not look at a message header and assume that the message came
from the person it says it came from (ie, the From: field). The
spoofers can hack that field so as to make the messages appear from
someone in YOUR address book or from someone who wrote a message that
YOU read sometime in the past. They can even hack the Subject: field.
These are all, unfortunately, exploits of the Windows operating
system and Outlook.

BTW, I received no such message (the first W message) thru w124list
coupes today. That message was, apparently, BOUNCED by the w124list
back to you. It never made it *thru* the list and on to everyone
else, if I am analyzing this correctly. That *suggests* that it
actually came from your computer, but doesn't prove it. Which *might*
mean that your computer is infected. But since you are using the
Microsoft company's domain mail, that seems unlikely because I would
assume that Microsoft has some pretty heavy anti-spam, anti-virus
coporate controls working on your mail system. They would have to.

So the bottom line:
It did not come from me or any other Mac (there are no known Mac OS
exploits in the wild *at this time*).
It did come from a computer running Windows, almost certainly.
And, unfortunately, almost certainly, you can't easily tell from who.

Regards,
Steve


On Dec 20, 2006, at 2:27 PM, Frank Smyth wrote:


> The email from dakota at mac.com sent earlier today to the W124 list

> (with the abbreviation "W" in the email) has the Win32/Bagle.gen

> virus embedded in a zip file entitled "new_price20-Dec-2006.zip"

>

> Cheers

> Frank

>

> -----Original Message-----

> From: w124list-bounces at mbcoupes.com [mailto:w124list-

> bounces at mbcoupes.com] On Behalf Of Steve Nervig

> Sent: 20 December 2006 20:23

> To: W124 CE Coupes and Convertibles

> Subject: Re: [W124] price_20-Dec-2006

>

>

> On Wednesday, December 20, 2006, at 04:41AM, "Frank Smyth"

> <Frank.Smyth at microsoft.com> wrote:

>> Virus-ridden spam.

>>

>> Can someone remove this guy from accessing the list ?

>>

>> From: w124list-bounces at mbcoupes.com [mailto:w124list-

>> bounces at mbcoupes.com] On Behalf Of Dakota

>> Sent: 20 December 2006 05:43

>> To: W

>> Subject: [W124] price_20-Dec-2006

>>

>

>

> Not sure who you are referring to, Frank. The above short-form

> header is a little vague, as it does not reveal a full address

> (only "Dakota").

>

> My address is dakota at mac.com, so if it is me that you are trying to

> indict, you are mistaken. I have a Macintosh, so I am pretty sure

> that, a) it is not infected with a PeeCee virus, nor,  b) it is not

> infected with any PeeCee trojan doing any spamming. This is, of

> course, because I am not running the Microsoft operating system,

> Windows.

>

> If only Microsoft could produce an operating system robust and

> secure enough to limit this type of activity, we all would be

> better off and not afflicted with the spam that proliferates the

> email system today. Several BILLION messages are sent every day,

> and 9 of every 10 messages, yes 90%!, are spam. And every single

> one of those spam messages, EVERY ONE, is propagated from a

> computer running the Windoze operating system.

>

> Regards,

> Steve

> ---

> drinking upstream from the herd

>

> _______________________________________________

> W124list mailing list

> W124list at mbcoupes.com

> http://www.pairlist.net/mailman/listinfo/w124list

> _______________________________________________

> W124list mailing list

> W124list at mbcoupes.com

> http://www.pairlist.net/mailman/listinfo/w124list


_______________________________________________
W124list mailing list
W124list at mbcoupes.com
http://www.pairlist.net/mailman/listinfo/w124list