At 2003-08-23 07:24 -0800, Robert Ritchey wrote: >The virus that ran the net last week takes names out of the >Outlook address book and "spoofs" return addresses. Given >the e-mail protocols, where you are on your honor to fill in the >correct return address, there is not way to prevent this. SPAMers >use this all the time so they cannot be traced. You can do this >yourself by entering a bogus return address in Outlook or other >e-mail program. I got hundreds of virus e-mails last week and >20-25 that said they had originated from my computer but I know >for a fact it is clean. My address was spoofed from someone >else's address book into the return address. I would double check >your machine but most likely the e-mails that were returned to you >were sent from another machine with you address substituted into >the return address field of the e-mail. Hope this helps.
Your analysis of the problem is correct. First I was getting 200 or so virus emails a day, but some days ago my provider (Xs4all.nl) has installed a server-wide filter to filter out all incoming and outgoing Sobig.F virus emails and I don't get them anymore, but now I'm still getting 30 or so warnings per day about virus mails that I am supposed to have sent. And I'm not just getting those kinds of emails but also warnings about people no longer having an account or people with email accounts that are (temporarily) full or people that are out-of-the-office or mailing list application confirmation requests etc. So Pieter, don't worry about it... And it will be over in a couple of weeks when all the virus filters will have been upgraded all over the world. Greetings, Jaap >At 06:59 AM 8/23/03 -0800, George Mogiljansky wrote: >>I suspect your computer is infected. Get help fast! >>George >> >>--- Pieter Hoeben <[EMAIL PROTECTED]> wrote: >>> Hi, I received a lot of these emails too. But I also >>> received something that worries me very much. >>> I received several emails with delivery problems >>> that had my email address as return address: >>> [EMAIL PROTECTED] >>> They often were reporting viruses too. >>> But I did not send them any email, they are NOT >>> in my addressbook, and I even don't use Outlook. >>> So somebody somewhere uses my [EMAIL PROTECTED] >>> as 'sent' or 'reply to' address. >>> >>> Does anybody know how I could find out who >>> does this? It causes me a lot of trouble. It may >>> even >>> be another company selling the same thing I do. >>> I just have no idea who. Or is the maybe the >>> virus software doing that? >>> >>> Any idea's somebody? All information is welcome. >>> >>> Kind regards, >>> >>> Pieter Hoeben >> >> >>__________________________________ >>Do you Yahoo!? >>Yahoo! SiteBuilder - Free, easy-to-use web site design software >>http://sitebuilder.yahoo.com >>-- >>Author: George Mogiljansky >> INET: [EMAIL PROTECTED] >> >>Fat City Network Services -- 858-538-5051 http://www.fatcity.com >>San Diego, California -- Mailing list and web hosting services >>--------------------------------------------------------------------- >>To REMOVE yourself from this mailing list, send an E-Mail message >>to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in >>the message BODY, include a line containing: UNSUB CHIPDIR-L >>(or the name of mailing list you want to be removed from). You may >>also send the HELP command for other information (like subscribing). > >-Bob >-------------------------------------------------------------------- >Robert Ritchey >Quest Engineering & Development >1328 East Cottonwood Lane >Phoenix, AZ 85048-4765 >Tel: (480) 460-2652 >FAX: (480) 460-2653 >E-Mail: [EMAIL PROTECTED] >E-Mail: [EMAIL PROTECTED] >E-Mail: [EMAIL PROTECTED] >E-Mail: [EMAIL PROTECTED] >WWW: www.QuestEngDev.com/ >WWW: www.Smart-Fly.com/ >-------------------------------------------------------------------- >-- >Author: Robert Ritchey > INET: [EMAIL PROTECTED] > >Fat City Network Services -- 858-538-5051 http://www.fatcity.com >San Diego, California -- Mailing list and web hosting services >--------------------------------------------------------------------- >To REMOVE yourself from this mailing list, send an E-Mail message >to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in >the message BODY, include a line containing: UNSUB CHIPDIR-L >(or the name of mailing list you want to be removed from). You may >also send the HELP command for other information (like subscribing). > -- Author: Jaap van Ganswijk INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB CHIPDIR-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
