On Thu, 25 Apr 2002 22:36:30 -0400, Clarence Verge wrote: > On Thu, 25 Apr 2002 11:32:58 -0500, Samuel W. Heywood wrote:
>> On Thu, 25 Apr 2002 10:05:06 -0500, Glenn McCorkle wrote: >>> Just a test, no need to reply. >> Hello Glenn: >> Glad to know the list is back up. Maybe the list got closed >> down temporarily as a result of the ongoing scourge of the >> KLEZ.H virus. I have received more than a dozen of them. The >> virus forges the email address of innocent people into the "To:" >> header. Several of the viruses I received were forged so as to >> seem to have been sent by list members, Jerry Haumberger and Neil >> Parks and also somebody else whose name does not come to mind. > I have no knowledge of this virus, but your description of the > transport method causes me to ask if anyone besides me got some > major spam from Bernie. > It seems very unlike him to send mail with 150 kb of attachments > that would only work for a Wincrap user. > I hope he hasn't gone over the edge. :(( The KLEZ.H email messages are typically about 140-150 KB. You have to have the most up to date virus definition files to identify it, as this virus was first discovered in the wild on April 17th. I received about four more of them since my posting you have just quoted. Oh, I made a mistake in something I wrote. Where I said the virus forges email addresses into the "To:" header, I meant to say that it forges email addresses into the "From:" header. We should all be very careful about accusing anyone of sending KLEZ.H emails. The virus automatically forges the email address of the sender. Even I have been accused of sending KLEZ.H. BTW, this behavior of the KLEZ.H virus could result in a discussion of an interesting legal question. It is against the law for one to send a forged email for the purpose of trying to bring embarassment or harassment upon the person whose name and email address is forged as the reputed sender. Regardless of whether the forgery is done deliberately by the owner of the computer or whether it is done by some program that the owner of the computer doesn't know is running inside of his machine, the owner should be held liable. I don't think the current scourge of email viruses will stop until we start having successful lawsuits conducted against all of the parties involved in the chain of transmission. IMNSHO, people must learn to use computers in a responsible manner or face civil and possible criminal penalties for failure to do so. If one should operate other kinds of equipment in a careless and irresponsible manner he would get punished. The same ought to apply to the irresponsible operation of a computer. I'll bet you dollars to donuts that a new KLEZ variant will soon be released that will automatically forge messages to all the "opt-in" lists and requesting that everyone on one's mailing list be subscribed to spam. Sam Heywood -- This mail was written by user of The Arachne Browser - http://arachne.cz/
