[Avcheck] Is tanatos a "faker"?

Ralf Hildebrandt Ralf.Hildebrandt@charite.de
Fri, 4 Oct 2002 12:56:55 +0200


On Fri, Oct 04, 2002 at 11:47:26AM +0200, Milan P. Stanic wrote:

> Sorry, I can't answer your question (because I don't know :( ) but
> I have question: What is "fakers" (list?)? From name it seems to be
> list of viruses with faked from address (Klez and alike) and I can

Correct!

> presume for what is it worth. But where it is in the infected script,
> or better yet, how to add one?

Here:
--- infected~   Thu Aug 15 16:21:39 2002
+++ infected    Thu Oct  3 17:02:02 2002
@@ -66,7 +66,7 @@
          # Set one of INFORM_SENDER or BOUNCE to y, or
          # sender will receive tow (non)delivery notifications
 
-FAKERS="(klez)"
+FAKERS="(klez|tanatos)"
# list of viruses known to forge sender address
# (egrep pattern, use "|" to separate names)

-- 
Ralf Hildebrandt (Im Auftrag des Referat V a)   Ralf.Hildebrandt@charite.de
Charite Campus Mitte                            Tel.  +49 (0)30-450 570-155
Referat V a - Kommunikationsnetze -             Fax.  +49 (0)30-450 570-916
Remember - if all you have is an axe, every problem looks like hours
of fun.