----- Original Message ----- From: "Chad Cooper" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, May 06, 2002 11:20 AM Subject: RE: Someone is impersonating me
> Rob, > There is a new virus (Klez) in the wild that can do E-mail spoofing. > Someone you know that has your address in their address book in outlook may > be infected. Your computer may be as well as a result. > > >From Symantec's web site > "Some variants of this worm use a technique known as "spoofing." If it does > this, it chooses at random an address that it finds on an infected computer > as the "From:" address that it uses when it performs its mass-mailing > routine. Numerous cases have been reported in which users of uninfected > computers receive complaints that they have sent an infected message to > someone else. > > For example, Linda Anderson is using a computer that is infected with > W32.Klez.E@mm; Linda is not using a antivirus program or does not have > current virus definitions. When W32.Klez.gen@mm performs its emailing > routine, it finds the email address of Harold Logan. It inserts Harold's > email address into the "From:" line of an infected email that it then sends > to Janet Bishop. Janet then contacts Harold and complains that he sent her > infected email, but when Harold scans his computer, Norton AntiVirus does > not find anything--as would be expected--because his computer is not > infected." > > Nerd From Hell While that is always a possibility (and I did look into it), its "From" me and "To" me, only the "From" me happens to be in Atlanta Georgia where a nasty little nest of Usenet trolls reside. In particular one Joe Alden who lives in Atlanta, and terrorizes alt.music.yes and alt.music.jethro-tull, is somewhat famous for pulling this exact spoof. Any day now I expect to find that "I" have become a homophobic, racist, skinhead neonazi type, and that I have turned on my online usenet friends. Luckily most of them are wise to this spoof since Joe Alden pulls it with regularity and frequency. On a.m.y, any variance with normal behavior gets your headers examined. (Dont you love such a naturally punny sentence?) xponent The Real One Maru rob > > > -----Original Message----- > > From: Robert Seeberger [mailto:[EMAIL PROTECTED]] > > Sent: Friday, May 03, 2002 11:40 PM > > To: [EMAIL PROTECTED] > > Subject: Someone is impersonating me > > > > > > Apparently someone is attemting to impersonate me by forging > > my header. > > rob > > > > > > Received: from kcmx01.mgw.rr.com ([24.94.163.190]) by > > mail.houston.rr.com > > with Microsoft SMTPSVC(5.5.1877.537.53); > > Fri, 3 May 2002 01:46:54 -0500 > > Received: from webmaster (c-24-98-172-83.atl.client2.attbi.com > > [24.98.172.83]) > > by kcmx01.mgw.rr.com (8.12.2/8.12.2) with SMTP id g436jH0n027614 > > for <[EMAIL PROTECTED]>; Fri, 3 May 2002 01:45:17 -0500 (CDT) > > Date: Fri, 3 May 2002 01:45:17 -0500 (CDT) > > From: [EMAIL PROTECTED] > > Message-Id: <[EMAIL PROTECTED]> > > Bcc: > > Return-Path: [EMAIL PROTECTED] > > > > test > > > > >
