[Heathkit] REGARDING VIRUS SENT:

Thu, 24 Oct 2002 18:09:27 -0500

Larry is absolutely correct. Please look at
http://securityresponse.symantec.com/avcenter/venc/data/[email protected] .
You will see:

"Because this worm does use a randomly chosen address that it finds on an
infected computer as the "From:" address, numerous cases have been reported
in which users of uninfected computers receive complaints that they have
sent an infected message to someone else."

"For example, Linda Anderson is using a computer that is infected with
W32.Klez.E@mm; Linda is not using a antivirus program or does not have
current virus definitions. When W32.Klez.E@mm performs its emailing routine,
it finds the email address of Harold Logan. It inserts Harold's email
address into the "From:" line of an infected email that it then sends to
Janet Bishop. Janet then contacts Harold and complains that he sent her
infected email, but when Harold scans his computer, Norton AntiVirus does
not find anything--as would be expected--because his computer is not
infected."

The long and the short of it, is that you two gentlemen have been pissing
all over each other, just as the author of this virus intended.

73

John
KC4ZXX

----- Original Message -----
From: "Larry J Saletzki" <[email protected]>
To: <[email protected]>
Cc: <[email protected]>; <[email protected]>
Sent: Thursday, October 24, 2002 5:53 PM
Subject: Re: [Heathkit] REGARDING VIRUS SENT:

> Hi Guys, Don't finger someone who appears to send you an e-mail with a
> virus attached. A month ago I got an e-mail from a friend of mine that
> had a virus attached. It just about brought me (not my p/c) to my knees.
> He died about 1 3/4 years ago. E-mail was from him but I know his p/c was
> not still online as I was the one who disposed of it and removed his
> e-mail stuff before it went. I almost pee'd my pants when I saw who the
> message was from. Thought at first hey maybe a good stock tip. But then
> reality set in not in these times! To net it out if you have someone in
> your address book even though they are silent keys you may still get a
> message from them. SO don't beat on the poor person who it came from. The
> best idea is to put a phoney name and address in you address book. That
> way if a virus has visited you you should get a address not found or some
> such message. Chill out all!  73's Larry WA9VRH
>
> On Thu, 24 Oct 2002 17:38:24 -0500 (CDT) "Jim Shorney"
> <[email protected]> writes:
> > -----BEGIN PGP SIGNED MESSAGE-----
> >
> > On Thu, 24 Oct 2002 14:51:26 -0700, Kevin Schuchmann wrote:
> >
> > >Gene,
> > >    way too much coffee.... try decaf...
> > >and calm down, his note wasn't bad and unfortunately the way some
> > viruses work these days its not always clear where it came from...
> > >Kevin
> > >WA6FWF
> >
> >
> > Agreed.
> >
> >
> > >----- Original Message -----
> > >From: "Gene A. Nailon" <[email protected]>
> >
> > >> First, your address is not even in my address book and has not
> > been
> > >> ever.
> > >>
> >
> >
> > Fact: some viruses can spoof the return address using ANY address in
> > the address book on the infected machine, whether it's your machine
> > or
> > not.  You have to parse the header to find the originating IP.
> >
> >
> > >> My virus software, Mr. Norton, is most likley more up to date
> > than
> > >> yours Duane.
> >
> >
> > Fact: you could have updated your ANTI-virus software 30 seconds ago
> > and still have a virus.
> >
> > I agree with Kevin, Duane's message was not unreasonable; if I ran
> > Microsoft products for web/email and potentially had a virus, I
> > would
> > sure want someone to politely inform me of it.
> >
> > Now, let's drop this.
> >
> > - --
> > Jim Shorney      -->.<--Put complaints in this box
> > [email protected]
> > [email protected]
> > Ham Radio NU0C
> > Lincoln, NE, USA
> > EN10PT
> > http://incolor.inetnebr.com/jshorney/
> > -----BEGIN PGP SIGNATURE-----
> > Version: 2.6.2
> >
> > iQCVAwUBPbiEcECBN4ScxcExAQFsCgP+PCywfU+l7g+k5J9e0NtPdsfdYhbr3gWW
> > I2KUhUspGW1fbUmGnvnUALmzowHhkcmnlwOoch8m0DY48Llfl/Gh+uQqm1TYrX01
> > Ws7SkEPonNjnUMbriUFJ2NLJAXyzgqaK7/7PTQKFk5GUCrY8J3EdL+0K/EA9WRRo
> > Mg8OpJneDi4=
> > =VuQN
> > -----END PGP SIGNATURE-----
> >
> >
> > _______________________________________________
> > List Administrator: Duane Fischer, W8DBF
> > ** For Assistance: [email protected] **
> > $$ See the vintage area on the HCI web site - http://www.w9wze.org
> > $$
> > Heathkit mailing list
> > [email protected]
> > http://mailman.qth.net/mailman/listinfo/heathkit
> >
>
> _______________________________________________
> List Administrator: Duane Fischer, W8DBF
> ** For Assistance: [email protected] **
> $$ See the vintage area on the HCI web site - http://www.w9wze.org $$
> Heathkit mailing list
> [email protected]
> http://mailman.qth.net/mailman/listinfo/heathkit