RE: Possible spurious warning - Fwd: MDaemon Warning - Virus Found

I think the variation of KLEZ look thru the infect computers address
book and picks an entry randomly to be the sender of the message, and I
guess you won.  Maybe you should play the lottery.  :)  I got a bounced
mail back from a client that said I had send the KLEZ virus to the
president of one of our largest clients.  Turns out they had an infected
machine on their network that send the email out and plucked my email
address from their address book as the sender.  The virus is trying to
be obscure.
cjg

Carl J. Galgano
EDI Consulting Services, Inc.
550 Kennesaw Avenue, Suite 800
Marietta, GA  30060
(770) 422-2995 - voice
(419) 730-8212 - fax
mailto:cgalgano@ediconsulting.com
http://www.ediconsulting.com
AS400 EDI, Networking, E-Commerce and Communications Consulting and
Implementation
http://www.icecreamovernight.com
Premium Ice Cream Brands shipped Overnight
FREE AS/400 Timesharing Service -
http://www.ediconsulting.com/timeshare.html
"You ain't gonna learn what you don't want to know" - rw


-----Original Message-----
From: midrange-l-admin@midrange.com
[mailto:midrange-l-admin@midrange.com] On Behalf Of Vernon Hamberg
Sent: Wednesday, May 15, 2002 10:03 PM
To: midrange-l@midrange.com
Subject: Possible spurious warning - Fwd: MDaemon Warning - Virus Found


Got this back - I here there is some kind of virus (K L E Z) that
harvests email addresses and sends email under the stolen name. I wonder
if this happened here. It means that one or more of us may have that
virus. I'm running Norton now, although it's usually on all the time.

>Date: Wed, 15 May 2002 14:02:23 +0200
>From: postmaster@alpina.si
>Reply-To: postmaster@alpina.si
>Subject: MDaemon Warning - Virus Found
>To: vhamberg@attbi.com
>X-MDaemon-Deliver-To: vhamberg@attbi.com
>X-Actual-From: postmaster@alpina.si
>
>The following message had attachment(s) which contained viruses:
>
>From      : vhamberg@attbi.com
>To        : ZBeks@alpina.si
>Subject   : RE: cae on linux
>Date      : Wed, 15 May 2002 06:54:15 -0500
>Message-ID: <5.1.0.14.2.20020515064219.0212a4f0@127.0.0.1>
>
>Attachment                    Virus name               Action taken
>-----------------------------------------------------------------------
-------
>cf207777362.hdr               ???                      Removed

Vern Hamberg

Would you like to see a challenging little arithmetic puzzle that might
get you or your kids or grandkids more interested in math? Go to
<http://cgi.wff-n-proof.com/MSQ-Ind/I-1E.htm>

Sillygism--

Something is better than nothing.
Nothing is better than a ham sandwich.
Ergo
Something is better than a ham sandwich.

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@midrange.com To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.