PDA

View Full Version : Sobig Virus from Newtek - NOT!



ballew
09-03-2003, 05:40 PM
I recieved an email containing the Sobig virus this evening that origianted from an ip address registered to Newtek using a unique email address that has only been given to Newtek.

The header info is:

Received: from unknown (HELO BILLYP) (207.235.86.2)

Somebody needs to check BillyP's computer.

I didn't email this to Newtek because I didn't want to furnish another email address that I will need to block which would be targeted by an infected computer .

Craig Ballew

Chuck
09-04-2003, 11:16 AM
Craig, there is no current address "billyp". Both spammers and virus spreaders very commonly spoof addresses, and have done so in this case. I have received spam and virus emails (my anti-virus software deletes the viruses but preserves the email so I can see where it came from) that were spoofed from a number of NewTek emails past and present, including my own address, and my email and system are in fact clean and free of viruses.

mattclary
09-04-2003, 11:48 AM
Yep, it's pretty common to get e-mails from spoofed addresses.

WizCraker
09-04-2003, 08:39 PM
Like 100% of spam is spoofed.