Email virus going around?!?

Everett Cox · Post by **Everett Cox** » 23 Jul 2002 10:53 pm

Harry-- A few days ago I was checking the spam that was being filtered/blocked at my ISP and was very disturbed to see 4 different messages FROM MYSELF. Like you, I figured a virus had gotten by PC-Cillin and immediately scanned my machines. Didn't find any bugs. Went back to the ISP site and opened the messages (had not done that earlier) and read that the senders openly stated they had put MY address in BOTH the 'To' AND 'From' fields. There seemed to be more than one actual sender involved. I hope this is not a new trend in spam. BUT, there was no virus, at least. --Everett

Jim Smith · Post by **Jim Smith** » 24 Jul 2002 5:42 am

As has been said before, this virus randomly puts names from the infected user's address book as the sender. My PC is clean, but I occasionally get returned email that I supposedly sent (but didn't) that was addressed to people I don't even know and aren't in my address book.

Mark Ardito · Post by **Mark Ardito** » 24 Jul 2002 6:05 am

Harry,

If you have run a live update and then scanned the machine, I would say you are clean. The Klez virus does spoof email addresses. Mine gets spoofed all the time.

Mark

John Gretzinger · Post by **John Gretzinger** » 25 Jul 2002 9:37 am

Boy - this stuff never ends.

Let me recap a lot of the stuff being said here.

#1 - Get a GOOD anti-virus product that updated daily or as needed and use it. **Personal preference PC-cillin or Sophos. Personal dislikes - McAffee. The reasons continue to be valid although they date back to 1985.**

#2 - If you have always on Internet (DSL, Cable, etc.) Get and use a personal firewall. ** Personal preference Zone Alarm - consistantly works on both incoming and outgoing files.**

#3 - Remember that KLEZ takes a look at the infected machine and used the Outlook Address book (contact list, etc.) to find a "From" addressee for the message it sends out to most if not everyone in your address book. Very seldom will it use your real address as the From address. Security professionals know this and don't really expect You to do anything - many of the return messages and "You sent a message containing a virus" from corporate firewalls are system generated and not personal.

#4 - Back up early and often.

#5 - If you don't know computers well, know someone well who does.

Enjoy

jdg

------------------
MSA D-10 w/Nashville 400
'63 Gibson Hummingbird
16/15c Hammered Dulcimer