The emails are not coming from ozdat... A computer infected with the W32.Klez virus will send random messages to email addresses found on the victim's pc. It searches in different places for email addresses, not only the Outlook address book. When it sends a copy of itself to a new victim, it randomly changes the _from_ address as well as the _to_ address. So to find out where it really came from, ignore the from field and check out the email headers. For more info read:
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.gen@mm. html "Email spoofing Some variants of this worm use a technique known as "spoofing." If so, the worm randomly selects an address that it finds on an infected computer. It uses this address as the "From" address that it uses when it performs its mass-mailing routine. Numerous cases have been reported in which users of uninfected computers received complaints that they sent an infected message to someone else. For example, Linda Anderson is using a computer that is infected with W32.Klez.E@mm; Linda is not using an antivirus program or does not have current virus definitions. When W32.Klez.gen@mm performs its emailing routine, it finds the email address of Harold Logan. It inserts Harold's email address into the "From" portion of an infected message that it then sends to Janet Bishop. Janet then contacts Harold and complains that he sent her an infected message, but when Harold scans his computer, Norton AntiVirus does not find anything--as would be expected--because his computer is not infected." Cheers, Chris Howard [EMAIL PROTECTED] http://turbovan.com > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Bob > Sent: Monday, 20 May 2002 11:36 AM > To: [EMAIL PROTECTED] > Subject: Re[2]: bizzare Emails???? > > > James Fitness: What list server software are you running? Are postings > to the list restricted to list members, or free to everyone? Maybe a > partial solution would be to restrict posting pivelidges to list > members only. > --membersozdat------------------------------------------------------- OZDAT Mailing List Please Note:- Send (un)subscribe requests to [EMAIL PROTECTED] Send submissions to [EMAIL PROTECTED] No unauthorised redistribution of this email http://www.ozdat.com/ozdatonline/index.htm http://www.ozdat.com/ozdatonline/listindex.html http://www.mail-archive.com/[email protected]/ ---------------------------------------------------------------------
