[Date Prev] [Date Next] [Thread Prev] [Thread Next] Indexes: Main | Date | Thread | Author

Re: [ba-unrev-talk] Criminal Spam


Aha!
Thanks Dennis.    (01)

----- Original Message ----- 
From: "Dennis E. Hamilton" <dennis.hamilton@acm.org>
To: <ba-unrev-talk@bootstrap.org>
Sent: Wednesday, September 25, 2002 9:45 PM
Subject: RE: [ba-unrev-talk] Criminal Spam    (02)


> Some people (one or more) who have ba-unrev-talk in their address books are
> infected by Klez.H.  I have received a small number that pretend to be sent
> from the list (but they really aren't).
> 
> One behavior of Klez.H is that it uses the available address book to
> propogate and it also uses the address book to falsify the origin of the
> infected messages that it creates.
> 
> So, someone who has Peter Jones in their address book and also has an
> address for ba-unrev-talk should look to see whether there is the
> possibility of a Klez.H infestation.
> 
> Peter, your ISP probably cannot prevent the forgeries, because the mail
> probably didn't actually go through their system.  Changing your email
> account doesn't really alter the situation.  The problem involves your entry
> in someone else's address book!
> 
> At the same time, it is prudent to take the appropriate precautions to
> confirm that your system is not infested.  There are tools for this at a
> number of antivirus sites, including
> 
> http://www.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html
> 
> -- orcmid
> 
> ------------------
> Dennis E. Hamilton
> http://NuovoDoc.com/
> mailto:dennis.hamilton@acm.org
> tel. +1-206-932-6970
> cell +1-206-779-9430
>      The Miser Project: http://miser-theory.info/
>      AIIM DMware: http://DMware.info/
> 
> -----Original Message-----
> From: owner-ba-unrev-talk@bootstrap.org
> [mailto:owner-ba-unrev-talk@bootstrap.org]On Behalf Of Peter Jones
> Sent: Wednesday, September 25, 2002 12:40
> To: ba-unrev-talk@bootstrap.org
> Subject: [ba-unrev-talk] Criminal Spam
> 
> 
> All,
> 
> It appears that someone is forging my email address in mail headers on
> emails
> that are designed to attack systems.
> I know Dr. Prueitt had this problem a while back. Does anyone know what to
> do
> about it short of changing to another mail domain?
> In the meantime I'm contacting my ISP.
> 
> Cheers,
> --
> Peter
> 
> 
> 
> 
> 
>     (03)