On 5/22/02 9:20 AM, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote:
> These are most likely courtesy of the Klez worm. > > The it takes both "To:" and "From:" addresses from the victim's address > book, so you may not know the person it's purportedly from. > > However, if you look at the full headers and the last (earliest by time) > "Received;"header, you can usually work out the domain it really came from. > If you know only one or two people in that domain, using Windows, advise > them that they may have Klez. All the usual anti-virus apps can detect and > stop it. You could also try complaining to postmaster@ that domain, but > most likely they'll ignore you. > -- > Alan > > >> on 5/22/02 7:57 AM, Tim Collier at [EMAIL PROTECTED] wrote: >> >>> Hi guys! >>> In the past few days, I've been getting email from absolute strangers with >>> attachments with extensions such as: .scr, .pif and .exe. All of these >>> files are small (less than 300 k). Does anybody have any clue what these >>> might be? >>> I suspect virii, but I really have no idea. It just seems strange that I >>> would get these emails in the first place since I don't know these people. > > Careful, Klez makes up and changes the "From:" address. The From address is randomly-chosen from email addresses that the worm finds on the infected computer http:[EMAIL PROTECTED] Bill -- Beer is living proof that God loves us and wants to see us happy ~~Benjamin Franklin~~ -- G-List is sponsored by <http://lowendmac.com/> and... Small Dog Electronics http://www.smalldog.com | Refurbished Drives | -- We have Apple Refurbished Monitors in stock! | & CDRWs on Sale! | Support Low End Mac <http://lowendmac.com/lists/support.html> G-List list info: <http://lowendmac.com/lists/g-list.shtml> Send list messages to: <mailto:[EMAIL PROTECTED]> To unsubscribe, email: <mailto:[EMAIL PROTECTED]> For digest mode, email: <mailto:[EMAIL PROTECTED]> Subscription questions: <mailto:[EMAIL PROTECTED]> Archive: <http://www.mail-archive.com/g-list%40mail.maclaunch.com/> Using a Macintosh? Get free email and more at Applelinks! <http://www.applelinks.com>
