Virus from Ohiou.edu

Alice Faber faber at HASKINS.YALE.EDU
Wed Oct 16 00:04:25 UTC 2002


David Bergdahl said:
>One clue that the Bapopik msg was infected was the address with a .ru
>suffix--is that Russia or Rumania?

Actually, one of the signatures of Bugbear is that it fakes email addresses
by taking a random username from the address book and combining it with a
random valid domain.
--
Alice Faber                                  tel. (203) 865-6163 x258
Haskins Laboratories                              fax  (203) 865-8963
270 Crown St                                   faber at haskins.yale.edu
New Haven, CT 06511



More information about the Ads-l mailing list