Bob Tom <tigers@bserv.com> wrote:
: Hey all.
: I've received the following message twice this month. I was
: wondering if any of you have received anything like this as
: well.
: The attachment with the message (NOT SENT HERE) is
: titled " Norton AntiVirus detected and q1 ". I've scanned
: my attachments and also every file on my drive with Norton's
: a few times since receiving the messages and it has not picked
: up anything. I have also not opened the attachment :-)
: Thanks.
Bob,
Dollars to donuts, this is what happened:
Someone out there has the Klez worm, and also has your e-mail address
as well as "Linda Wetherall"'s address stored somewhere on their
computer. Could be in their address book, or just in a saved message
on their system somewhere. The worm sent itself to "Linda Wetherall"
and spoofed the from address to be from you. The e-mail system that
handles "Linda Wetherall"'s e-mail detected the virus and bounced the
message to what it thought was the sender... you.
I get a bunch of these bounces; running several popular web sites
has put my various e-mail addresses out there on a lot of PCs. Since
you are fairly certain you don't have the virus, I wouldn't worry
about it. Unfortunately, Norton's misdirected message is fairly
useless because the autoresponder doesn't include the full headers
of the infected e-mail, which is the only way to determine who it
really came from. So, the only thing you can do is put it in the
trash. If it becomes a problem, the administrators at the site
running the Norton program might be able to track down the source,
depending on their logging practices and willingness to cooperate,
but its probably more trouble than its worth.
---Jon-
.---- Jon Steiger ------ jon@dakota-truck.net or jon@jonsteiger.com -----. | I'm the: AOPA, DoD, EAA, NMA, NRA, SPA, USUA. Rec & UL Pilot - SEL | | '70 Barracuda, '92 Ram 4x4, '96 Dakota, '96 Intruder 1400, '96 FireFly | `----------------------------------------- http://www.jonsteiger.com ----'
This archive was generated by hypermail 2b29 : Fri Jun 20 2003 - 12:05:16 EDT