[Mono-list] Hi

Ian MacLean ianm@ActiveState.com
Tue, 20 Jan 2004 10:10:13 -0800

Just in case you're all cursing my name for propogating email virii it 
looks like it spoofed my email into the from field. I've run the 
symantec detection tool to be sure and I am beagle free.

this note from the symantec security response document kind of confims 
this - even though the domain names are different.

    * The from address will be spoofed such that it will appear to come 
from someone belonging to the same domain as the receiver.


Denis Gervalle wrote:

> For those who have got it, message "Hi" from "ianm@ActiveState.com" is 
> a new Trojan horse worm currently spreading widly. More information on 
> http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.a@mm.html. 
> Be careful,
> Denis
> ianm@ActiveState.com wrote:
>> Test =)
>> sgofvwkqwalnb
>> -- 
>> Test, yep.