Silent Virus List

[Martin Sapsed]

Julian Field wrote:
> At 10:43 28/01/2004, you wrote:
>
>> When viruses fake 'from' info, do they just fake the 'From:' header,
>> or do
>> they fake the envelope sender too?
>
> Yes.

To be slightly picky, this is an over generalisation. Some worms e.g.
SirCam, Hybris fake the From: address but leave the sender address as
that of the victim.

Cheers,

Martin

--
Martin Sapsed
Information Services               "Who do you say I am?"
University of Wales, Bangor             Jesus of Nazareth