Return-Path: Received: (qmail 5173 invoked from network); 3 Dec 2001 09:04:34 -0000 Received: from unknown (HELO murphys-inbound.services.quay.plus.net) (212.159.14.225) by excalibur.plus.net with SMTP; 3 Dec 2001 09:04:34 -0000 Received: (qmail 18086 invoked from network); 3 Dec 2001 09:04:46 -0000 Received: from unknown (HELO post.thorcom.com) (212.172.148.70) by murphys.services.quay.plus.net with SMTP; 3 Dec 2001 09:04:46 -0000 Received: from majordom by post.thorcom.com with local (Exim 3.33 #2) id 16AoxF-0004mi-00 for rsgb_lf_group-outgoing@blacksheep.org; Mon, 03 Dec 2001 09:00:01 +0000 Received: from carbon.btinternet.com ([194.73.73.92]) by post.thorcom.com with esmtp (Exim 3.33 #2) id 16AoxE-0004mG-00 for rsgb_lf_group@blacksheep.org; Mon, 03 Dec 2001 09:00:01 +0000 Received: from [213.122.100.12] (helo=dave) by carbon.btinternet.com with smtp (Exim 3.22 #8) id 16AowX-0000FQ-00 for rsgb_lf_group@blacksheep.org; Mon, 03 Dec 2001 08:59:17 +0000 Message-ID: <000001c17bd9$54866ca0$0c647ad5@dave> From: "Dave Sergeant" To: rsgb_lf_group@blacksheep.org References: <5.1.0.14.0.20011201140328.00a93468@gemini.herts.ac.uk> <003901c17aa2$79bffb40$8fce28c3@ericadodd> <000b01c17ac3$1ad89ee0$0300a8c0@charter.net> <000901c17ac9$d296d500$e1e086d4@ericadodd> <000e01c17abc$8efa6760$74b21bca@rvernall> Subject: LF: Re: Notes on virus protection Date: Mon, 3 Dec 2001 07:48:14 -0000 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group Sender: Bob Vernall wrote: >Address book with !000 >----------------------------- >The way of having a "duff first address" is to use the address !000. In fact this will do absolutely nothing with the Badtrans virus. It and a lot of the current viruses do not glean their email addresses from your address book - rather they get them from messages in your inbox (you do clear it don't you..) and html files in your cache. Even those viruses which do use the address book will probably only use a selection - yes you MIGHT get a warning, but it will probably have sent all the other mails anyway. Several of the virus sites quote this as a hoax - perhaps not so, but it should be classed as something which does no harm but probably does little good either. The way to stop viruses is (a) to spot them and delete them before they do any harm and (b) keep your virus signatures up to date. If you get to the point of using the above tactics it is already too late when you get the warning, you have been hit! The advice about turning off the preview pane is good, but will still not in this case stop the virus infecting you when you do actually open it if you have not applied the MS patch. And even if you do, if you then click on the attachment or ignore all warning messages you are a fool! 73s Dave G3YMC dsergeant@iee.org dsergeant@btinternet.com http://www.dsergeant.btinternet.co.uk