Security Focus just sent me a virus

**EvilRick** · February 24th, 2004, 07:41 PM

This file: "Unknown0000.data" was infected with: "Bloodhound.Exploit.6" virus.

I can't believe it. I'm gonna Google in a bit to see if anybody else has experienced this.

**RobRich** · February 24th, 2004, 07:47 PM

Security Focus didn't send you anything, it was a forged email header. For example, my primary TechIMO address was used in the first known batch of MyDoom emails.

If you examine the source of the email, you will find the message never originated from any known Security Focus server.

Robert Richmond

**EvilRick** · February 24th, 2004, 07:51 PM

Your sure about that?

I'd have to say, it's a good "forgery".

Now I'm going to have to dig.

Detritus · February 24th, 2004, 08:12 PM

We had the same thing with MyDoom at work... emails coming from ppls machines when their machines weren't even on...

**EvilRick** · February 24th, 2004, 08:18 PM

I figure some "Foo" sent it to me.

**RobRich** · February 24th, 2004, 08:22 PM

[inside joke] That would be crazy.

[/inside joke]

Detritus · February 24th, 2004, 08:24 PM

Yo!!!! you two "Foos" (if that is the right lingo

) look like your avatars are about to take each other out... any way, we even got returned emails that were sent from our machines (yeah right) to nonexistant email addys.

**EvilRick** · February 24th, 2004, 08:27 PM

It's to an address I don't publish and not the one I sent either. Same domain, but different account.

I don't really think it's from a "Foo", but yes, that would be funny. Just a coincidence . . . I hope. :shakinginmyboots:

**RobRich** · February 24th, 2004, 08:31 PM

Quote:

your avatars are about to take each other out

Didn't you know? Rick is my evil opposite from another dimension. Haven't you ever seen that episode of Star Trek where Mr. Spock had a beard?

**EvilRick** · February 25th, 2004, 12:11 PM

It seems the e-mail contained some "proof-of-concept code" that triggers avtivirus software.