Klez. Someone who is infected with it has his name in their address book. When Klez sends the virus, it grabs a name from the address book and then uses it as the FROM
-----Original Message----- From: Rama Arumugam [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 18, 2002 1:11 PM To: Exchange Discussions Subject: Exchange Security Breach???? Hello everyone, One of my users (unfortunately it's my Supervisor) got an alert from Group Shield saying that his attachment (.exe) was blocked. But he swears that he didn't send out any emails. Not only that, we were unable to find anything on his Sent Items folder either. Here is what he received on his inbox from Postmaster **************************************************** -----Original Message----- From: postmaster [mailto:[EMAIL PROTECTED]] <mailto:[mailto:[EMAIL PROTECTED]]> Sent: Friday, September 13, 2002 2:55 PM To: [EMAIL PROTECTED] Subject: Undeliverable mail--"Helvetica" The following mail can't be sent to [EMAIL PROTECTED]: From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Helvetica The attachment is the original mail **************************************************************************** ***** I just can't seem to find any information on this on the internet. "Helvetica" is a font. That's all I've got so for. Could this be a Security breach? Is someone using my exchange server? Has anyone received any messages like this before? Please help. Any input is welcome! Thanks everyone! rama Rama Arumugam Network Administrator Wire DynamiX.com (253) 395-4527 _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
