From: Steve Grammont (islander@midmaine.com)
Date: Thu May 16 2002 - 19:39:32 PDT
David,
This is part of a new virus.
Old viruses - infect a system, grab addresses out of the address book,
then email everybody from that system using that email account. So if
Joe's system was infected, all virus emails would be from Joe's email address.
Nnew virusses - infect a system, grab addresses out of the address book,
then email everybody from that system but uses addresses from the book in
the FROM field. So if Joe's system was infected, virus emails would be
sent from Joe's system but perhaps with Jane's email in the FROM field
and not Joe's.
It's a bit more complicated than that, but the gist of it is that these
emails pretend to be from someone who was never actually infected. Hell,
I just had a virus emailed to one of my email accounts by another one of
my email accounts. In other words, I emailed a virus to myself according
to the FROM field :-) Since I am on a Mac and don't use a Microsoft email
client there is no way that the virus infected me. And I certainly
didn't email myself a virus.
Just a heads up to you folks that when you see a virus coming you can no
longer assume that the FROM field means it in fact came from that person.
We've just upgraded our server's email package to block this sort of crap
from happening. It is a VERY pervasive virus. Don't yell at Dave :-)
Steve
>One person on this list, and one not on this list, have inquired about me
>sending them an email. (which may or may not have a virus).
>
>I NEVER forward jokes, virus warnings, patriotic messages, solicitations to
>anyone...if you get one of these supposedly from me...its not, so delete it.
>
>I NEVER send attachments to anyone, other than in direct RESPONSE to a
>private email....if you get one of these supposedly from me...its not, so
>delete it.
>
>I have run Norton today...and it says my computer is virus free....I suspect
>someone else's computer has my email address in an address book, and
virus is
>picking it up, and sending this cloaking them as mine.
>
>On a more interesting note.....I NEED to find body parts for a V17A/MTQ
>Signal Corps 6x6. If you know where any are please let me know.
>
>Thanks,
>David Doyle
>
>
>===Mil-Veh is a member-supported mailing list===
>To unsubscribe, send e-mail to: <mil-veh-off@mil-veh.org>
>To switch to the DIGEST mode, send e-mail to <mil-veh-digest@mil-veh.org>
>To reach a human, contact <ack@mil-veh.org>
This archive was generated by hypermail 2.1.4 : Fri Aug 16 2002 - 11:21:11 PDT