pete at twisted.org.uk - W32/Bagle.E at mm

[Lee Brotherston]

On Thu, Mar 04, 2004 at 09:56:39AM +0000, gerald davies wrote:
> just to let you know.  i've receieved 2 emails from "pete at twisted.org.uk" 
> which have been directed to "freebsd-users at uk.freebsd.org" that have 
> according to my anti-virus software contained the W32/Bagle.E at mm virus.

Afaik W32/Bagle.E at mm spoofs the sender address so who you have in the
from address doesn't really matter.  You might get lucky and find it
was sent from a host with a static ip assignment from their ISP if you
look in the header (assuming you were asking to track down who is
infected).

Cheers

  Lee

-- 
Lee Brotherston - <lee at nerds.org.uk>
Jar Jar Binks Makes The Ewoks Look Like Shaft