[vox] New virus?

[Marc Elliot Hall]

Bill Kendrick wrote:
> On Tue, Aug 19, 2003 at 03:12:54PM -0700, Mark K. Kim wrote:
> 
>>I'm sure I didn't send it for many many awfully many reasons (one being
>>the X-Mailer).
>
> Back when Klez first appeared, I created this page to send to people:
> 
>   "You Didn't Get a Virus from /ME!/"
>   http://www.newbreedsoftware.com/bill/virus/
> 
>     "...What has most likely occured is that someone else's computer sent you
>     a virus, and the virus was nice enough to randomly pick my e-mail address
>     to show as the sender. ..."

Ah, fond memories of Klez... :^P

>>But all that aside, my biggest concern right now is that I
>>got this e-mail on my e-mail account that's never been spammed before and
>>the one I guard with my life.  Oh man...
> 
> Well, realize it goes something like this:
> 
> There are three people involved.  Mark, Mark's friend (we'll call him/her
> "Pat") who is the original victim, and the intended new victim
> (we'll call him/her "Vick").
> 
>   1. Pat's computer get's infected
> 
>   2. The virus on Pat's computer randomly picks [roll of the dice]
>      Mark as the 'From' address and Vick as the 'To' address
> 
>   3. The virus sends the e-mail to Vick.
> 
>   4. Vick, or Vick's mail server decides it's a spam or virus, and
>      contacts Mark (automatically or manually) to complain.
>      "Hey Mark!  Stop sending Vick viruses!"
> 
> So at this point, even though you only gave Pat your e-mail address,
> and you might not know Vick at all, now Vick or Vick's mail server
> knows it, too, and thinks it's sending spam. :^)
> 
> D'oh!
> 
> -bill!
> (_carefully_ typing this into PuTTY on a Windows2000 box... *whimper*)
> 

I've had my address end up in the "reply-to" header of virus-created 
email before. It's a miserable experience trying to explain to people 
one doesn't know that one didn't send particularly nasty attachments to 
them.

On the other hand, I haven't had any of those eperiences lately :^)

No... wait! Does that mean I don't have any friends? :^/

I think bill! proved that by misspelling my name ;^P

-- 
Marc Elliot Hall           www.hallmarc.net/quick_resume.html
P.O. Box 435
Shingle Springs, CA 95682
www.hallmarc.net		                      Hire me!