Its most likely Klez. When a computer is infected, it will grab an email
addy out of the infected machines address book, then send the virus with
that persons addy in the from field.
So it looks like it came from somewhere else. The headers tell the truth
though.
We get a couple of complaints
Thanks Martin. How about the To field? Will the virus grab the address
from the same address book (randomly) and puts it in the To field?? That
is what I am curios to know. I already asked the user to send me the email
if it has not been deleted.
Sui
Its most likely Klez. When a computer is
yes
-Original Message-
From: sui seto [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 18, 2002 9:41 AM
To: MS-Exchange Admin Issues
Subject: RE: Virus - Mass Mailing
Thanks Martin. How about the To field? Will the virus grab the address
from the same address book (randomly) and puts
Title: RE: Virus - Mass Mailing
Klex grabs from Abs and Temp Internet Files
-Original Message-
From: William Lefkovics [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 18, 2002 01:05
To: MS-Exchange Admin Issues
Subject: RE: Virus - Mass Mailing
Could be a few things. Some
Yep. I then sends to everyone in the users contacts folder.
-Original Message-
From: sui seto [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 18, 2002 6:41 AM
To: MS-Exchange Admin Issues
Subject: RE: Virus - Mass Mailing
Thanks Martin. How about the To field? Will the virus grab
