Virus Warning

Jonathan Robie jonathan.robie at datadirect-technologies.com
Tue Oct 8 02:15:25 EDT 2002


At 04:18 PM 10/6/2002 -0400, Philip E. Cleary wrote:
>I just received a message addressed to the list with the subject "Sincerely
>yours." It was purportedly sent from jwrobie at mindspring.com. It is infected
>with the W32.Klez.H at mm virus.

Sigh.

I went in to the administrator's menu to put myself on permanent 
moderation, but it looks like Carl beat me to it. I think that will prevent 
any further virus-laden messages from my address.

These emails were not sent from my computer, but from someone who spoofed 
my address. There are several reasons I'm fairly sure this didn't originate 
with my computer: (1) on Thursday, I was working at Almaden Research 
Center, which has security measure that prevented me from sending any mail 
at all, and some of these mails were sent at times I was simply not 
connected to the Internet; (2) Norton AntiVirus Corporate Edition, which is 
running on my computer, detects the virus in the incoming mails and deletes 
them without letting me read them, so I seem to be protected against this 
one; (4) I use Eudora, and Klez usually targets Outlook; (4) Norton also 
fails to find any viruses on my computer.

The email headers for most of the mails seem indicate that they were sent 
by someone else:

>Received: from Ubouymdex ([162.130.1.254]) by out016.verizon.net
>           (InterMail vM.5.01.05.09 201-253-122-126-109-20020611) with SMTP
>           id <20021003173108.BUQK9318.out016.verizon.net at Ubouymdex>
>           for <b-greek at franklin.oit.unc.edu>;

Some of the email headers are less clear.

I'm not an expert on viruses, but I don't think this is coming from my 
computer. Regardless, Carl and I have put me on moderation so no new 
viruses slip out to the list, and I got the latest updates from Norton.

Jonathan








More information about the B-Greek mailing list