[wellylug] virus complaint to me

[David Antliff]

On Fri, 26 Nov 2004, Michael Dittmer wrote:
> Someone else with a Windows box has been infected and is faking e-mail.

Faking? I really don't think so:

http://securityresponse.symantec.com/avcenter/venc/data/w32.lovgate.ak@mm.html
"The From line of the email is spoofed"

This is pretty common behaviour from such programs. It simply sent itself 
to someone else and spoofed the From address as the OP. When it bounced, 
the response was sent to the From address.

> I would get in contact with your ISP and tell them. Also, forward any logs
> to the ISP.

Why bother? It's just a straightforward virus infection on some Windows 
box somewhere. It doesn't indicate anything the ISP needs to know or care 
about.

-- 
David.