Silent Virus List

Martin Sapsed m.sapsed at BANGOR.AC.UK
Tue Feb 3 17:36:19 GMT 2004

Julian Field wrote:
> At 10:43 28/01/2004, you wrote:
>> When viruses fake 'from' info, do they just fake the 'From:' header,
>> or do
>> they fake the envelope sender too?
> Yes.

To be slightly picky, this is an over generalisation. Some worms e.g.
SirCam, Hybris fake the From: address but leave the sender address as
that of the victim.



Martin Sapsed
Information Services               "Who do you say I am?"
University of Wales, Bangor             Jesus of Nazareth

More information about the MailScanner mailing list