[bf1942] About the mail virus

James Gurney james at globalmegacorp.org
Mon Jan 19 05:28:12 EST 2004


Andreas Fredriksson said:
>
> The virus mail was obviously not sent by me, and not even from my
> workstations;
> I'm not sure what's going on here. The virus might live in our network,

If you examine the headers for the virus email, it originated from the IP
address: 66.219.41.214

Doing a search of my mail archives appears to indicate that this is:

"Tristan Gulyas" <zardoz at shafted.com.au>

So, not from inside your network at all. Just your average virus email
that forges the from address with a random entry from the address book.

James



More information about the Bf1942 mailing list