Re: [MLUG] Weirdness with emails

[Herbert Wolverson <EMAIL:PROTECTED>]

Hey,

On Mon, Jun 07, 2004 at 01:50:24PM -0500, Jason McIntosh wrote:
> Ok, had to ask about this.  Normally with most virus spoofs, I 
> wouldn't ask, but I've been getting a LOT of one very specific type. 
> It's always saying I sent the email, and it's always to the same 
> address.  EMAIL:PROTECTED  The funky thing is it's always 
> a different virus, different host, etc. etc.  I've been getting a LOT 
> of these emails.  Some examples follow.   
> The oddity here is that  
> 
> I'm not using windows for my primary email.  The machine that I DO have 
> running windows has Norton AntiVirus, is behind a firewall, is patched 
> pretty heavily, etc. etc.  In other words, should be a clean system.   
> I've gotten a LOT of these emails over multiple dates.  May 25th, May 
> 31st, June 1st, Yesterday, and Today, not to mention who knows how many 
> others I've deleted.  They're all the same sender/recipient, but 
> different virus's, and they're all VERY funky.  Anyone know what the 
> heck is going on here?  Does someone have a virus or many on their 
> machine, me as the only addressbook recipient or something?  I'm VERY 
> confused as to why I'm getting all of these, with JUST that sender from 
> "me". 
> Thoughts?  Suggestions?  Etc.? 
> Jason 

These are really annoying, but you can expect to see plenty of them. 9 times
out of 10 they don't mean you have a virus - they mean that someone has their
antivirus gateway configured to send warnings to whomever is in the "From" 
header of infected emails. Since most modern email worms spoof that to match
someone in the local user's address book, that means that they waste bandwidth/
effort spamming out warnings to the wrong users.

(I gave up on trying to get warnings to the right people back when Klez was new,
and simply drop infected emails now!)

-- Herbert.
_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members