> Ok, here's an explanation: Let's say I got the virus and foolishly opened > it. It's one of those "send to everyone in the address book" kinda viruses, > so all of you in my address book would get the virus. Pretty normal stuff. > BUT, Klez also goes through my address book and changes the "From" email > address when it sends out the virus. Much like the recipient of the virus > is chosen from my address book, so is the mock sender. Makes it a lot > harder to track.
It also makes it a lot harder to follow, but I *think* I know what you mean... ;p > >From the looks of things, Aig, someone has both your address and the address > of the person that says you sent the virus, in their address book. That > person probably has the Klez virus. Who knows? Maybe that person has the > Mirage address in the addy book too. I doubt they would have the Mirage address, although I have it... still, I found out later that the person affected has an AOL account, and they had left their account window open all night, not too long ago. So they figure someone got in and is sending things through their account. They changed their passwords, and hope for the best. Since getting "hit" with not only a hoax virus, where you are supposed to delete some file from your HD, and turns out you shouldn't... also got bombarded with emails from someone whose computer was infected with the something-32 virus, I was getting over 500+ duplicated emails a day from this poor victim. Gack. Had to call my ISP and ask them to delete everything from this person, and they said they had about 50 emails coming per hou, before they blocked it. This happened about a year ago. > Raph "> (Didn't find the graveyard I was looking for today...durnit) Graveyards are great for camping in... so I hear.... ;p Aig
