No. It is the nature of the Klez beast. See below a quote from Lockergnome.

"When Klez propagates, it takes a random email address from your Outlook/OE
address book and inserting it as the From address before it blasts out its
payload to the rest of your address book. So, when you receive an email from
someone that is infected, it may appear to come from an entirely different
person. In some cases, I've received email from myself, to myself, or so it
appears. When I look at the headers, I can see that it has traveled through
various outside SMTP servers indicating that I had nothing to do with the
sending of the email to begin with."


-----Original Message-----
From: Roger Smith [mailto:[EMAIL PROTECTED]] 
Sent: Monday, April 29, 2002 8:31 PM
To: Exchange Discussions
Subject: Sort of OT but!!!!


Hi all
I have a client who is experiencing the following problem.   
He is receiving the virus messages for mail that he has not sent.   What is
happening is that someone has used his email address to proliferate the KLEZ
virus and all the sites that have received it have emailed him saying that
the mail that he has sent has the virus.    I went through all the logs for
both the exchange and the external mail interface and non of the mail was
sent by him (come to that, from the site).   Apart from changing his email
address, dropping the old address and causing absolute bedlam is there any
way of stopping this?
Thanks

Roger Smith  MCSE, MCP+I, CCNA
Technical Support Manager
OfficePCs
10 Cape Street
Dickson
Phone : 62579111
Fax:      62579004
[EMAIL PROTECTED]
 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to