Re: How's this for a cunning piece of spam.

Naa,

Its the virus (or one of its cousins) which caused the damage. Some viruses will email al the receipents in a persons address book. If antivirus_at_isd3.timesgroup.com was in an address book (even by accident), got emailed and that server had the virus, the server will then send emails again on antivirus_at_isd3.timesgroup.com behalf!

I even had spam from myself to myself at one time. I kid ye not!

I can see why you are cynical though :-)

M

"Jonathan Lewis" <jonathan_at_jlcomp.demon.co.uk> wrote in message news:<bi8ing$47p$1$8302bc10_at_news.demon.co.uk>...
> The following message appeared in my email
> with a FROM address of:
> antivirus_at_isd3.timesgroup.com
>
>
> ===================================================
>
> Vexira has detected the following in a mail from your address:
>
> Worm/Sobig.F virus
>
> The mail was not delivered.
>
> Your computer may be infected with a virus! Please visit
> Central Command at http://www.centralcommand.com and obtain a copy
> of Vexira AntiVirus now.
>
> ===================================================
>
> Now, if I were a cynical, bitter and suspicious person,
> it might cross my mind that every anti-virus company
> in the world could spam every known email address
> from just about every other known email address with
> a message that claimed to be from a user of their anti-virus
> software that had detected a virus in an email from the
> first email address..
>
> Would a software company really be that underhand ?
>
>
>
> --
> Regards
>
> Jonathan Lewis
> http://www.jlcomp.demon.co.uk
>
> The educated person is not the person
> who can answer the questions, but the
> person who can question the answers -- T. Schick Jr
>
>
> One-day tutorials:
> http://www.jlcomp.demon.co.uk/tutorial.html
>
> ____Finland__September 22nd - 24th
> ____Norway___September 25th - 26th
>
>
> Three-day seminar:
> see http://www.jlcomp.demon.co.uk/seminar.html
> ____USA__October
> ____UK___November
>
>
> The Co-operative Oracle Users' FAQ
> http://www.jlcomp.demon.co.uk/faq/ind_faq.html
Received on Tue Aug 26 2003 - 05:35:12 CDT