IP addresses are not spoofable except under very extreme conditions requiring a fault in the receiving program as well as the transmitting one. spamcop.net uses the reported IP address to track back to the source rather than the name that the joke.exe program reports itself as. Of course, when I say source, I mean the machine that joke.exe is running on, not the machine that the programmer who wrote joke.exe is working from. Please correct me if anyone knows more. Compiling a list of the headers that people are receiving this with will allow us to track down the exact source and email him to fix it. --- James Newton (PICList Admin #3) mailto:jamesnewton@piclist.com 1-619-652-0593 PIC/PICList FAQ: http://www.piclist.com or .org -----Original Message----- From: pic microcontroller discussion list [mailto:PICLIST@MITVMA.MIT.EDU]On Behalf Of Nigel Goodwin Sent: Tuesday, April 03, 2001 12:57 To: PICLIST@MITVMA.MIT.EDU Subject: Re: [OT]: Virus Again In message <00e001c0bc6d$3acf5fa0$4b47073e@dougal>, Chris Carr writes >Dan Michaels wrote > > >> I just received another e-mail from the HaHaHa guy labelled >> >> Snow White ..... >> >> Comes around about once a week. Contains an attachment named >> Joke.exe which has the virus: >> >> W32/Hybris.gen@M >> >> I presume they got my email address from piclist - anyone >> else seeing the same thing? >> >Yes I got it, but I forgot to look at the header to see where it had >actually originated from before I deleted it. Duh I don't think it would help?, this virus uses a forged header - so you can't tell who it's coming from. I've been getting 2-3 a week for the past few months, and haven't been able to find where they are coming from. Luckily I don't use Outlook or Outlook Express, and I run Norton Internet Security which identifies it nicely (I've still got a few copies in quarantine!). -- Nigel. /--------------------------------------------------------------\ | Nigel Goodwin | Internet : nigelg@lpilsley.co.uk | | Lower Pilsley | Web Page : http://www.lpilsley.co.uk | | Chesterfield | Official site for Shin Ki and New Spirit | | England | Ju Jitsu | \--------------------------------------------------------------/ -- http://www.piclist.com hint: The list server can filter out subtopics (like ads or off topics) for you. See http://www.piclist.com/#topics -- http://www.piclist.com hint: The list server can filter out subtopics (like ads or off topics) for you. See http://www.piclist.com/#topics