On Wed, Sep 24, 2003 at 09:36:48AM +0200, Lubos Vrbka wrote:
> i think bruce is (at least partially) right.
> 
> i used one e-mail address for the posting / receiving mails from netbsd 
> maillists. then the virus infected mails started to come. i then moved 
> to another organization and got new e-mail. i changed my subscription, 
> because the old address would be probably cancelled. after posting 1-2 
> messages i started to get (after a day or so) these e-mails in number 
> ~100 per day, too.

Well, as mentioned earlier in this thread, there are a few mailing
list-to-news gateways for the NetBSD lists. For example, see:
http://groups.google.com/groups?group=fa.netbsd.help
http://groups.google.com/groups?group=mailing.netbsd.help

It seems likely that the worm harvested addresses from those
newsgroups.
-- 
Name: Dave Huang         |  Mammal, mammal / their names are called /
INet: khym@azeotrope.org |  they raise a paw / the bat, the cat /
FurryMUCK: Dahan         |  dolphin and dog / koala bear and hog -- TMBG
Dahan: Hani G Y+C 27 Y++ L+++ W- C++ T++ A+ E+ S++ V++ F- Q+++ P+ B+ PA+ PL++