[Avcheck] Is tanatos a "faker"?

Milan P. Stanic mps@rns-nis.co.yu
Fri, 4 Oct 2002 11:47:26 +0200


On Fri, Oct 04, 2002 at 09:09:35AM +0200, Ralf Hildebrandt wrote:
> Is the recent BugBear (recognized as tanatos by AVP) a faker (does it
> fake the sender address?). It seems so, so I would propose adding it
> to fakers in the infected script.

Sorry, I can't answer your question (because I don't know :( ) but
I have question: What is "fakers" (list?)? From name it seems to be
list of viruses with faked from address (Klez and alike) and I can
presume for what is it worth. But where it is in the infected script,
or better yet, how to add one?

TIA

Milan