The UK Home Automation Archive

Archive Home
Group Home
Search Archive


Advanced Search

The UKHA-ARCHIVE IS CEASING OPERATIONS 31 DEC 2024


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: OT: Virus(?) help





More information on email spoofing used by virii:

This worm often uses a technique called "spoofing." When the worm
performs
its email routine, it can use a randomly chosen address it finds on an
infected computer as the "From:" address. Numerous cases have
been reported
in which users of uninfected computers received complaints that they sent
an infected message to someone else.

For example, Linda Anderson is using a computer infected with
W32.Klez.H@mm. Linda is not using an antivirus program or does not have the
current virus definitions. When W32.Klez.H@mm performs its emailing
routine, it finds the email address of Harold Logan. The worm inserts
Harold's email address into the "From:" portion of an infected
message,
which the worm then sends to Janet Bishop. Then, Janet contacts Harold and
complains that he sent her an infected message, but when Harold scans his
computer, Norton AntiVirus (NAV) does not find anything because his
computer is not infected.

There have been several reports that, in some cases, if you receive a
message that the virus has sent using its own SMTP engine, the message
appears to be a "postmaster bounce message" from your own domain.
For
example, if your email address is jsmith@xxxxxxx, you could receive a
message that appears to be from postmaster@xxxxxxx, indicating that
you attempted to send an email and the attempt failed. If this is the false
message sent by the virus, the attachment includes the virus itself. Of
course, such attachments should not be opened.


Cheers,


/Neil/
Domains, web hosting and design
www.spellings.net




This communication is for informational purposes only.  It is not intended
as
an offer or solicitation for the purchase or sale of any financial
instrument
or as an official confirmation of any transaction. All market prices, data
and other information are not warranted as to completeness or accuracy and
are subject to change without notice. Any comments or statements made
herein
do not necessarily reflect those of J.P. Morgan Chase & Co., its
subsidiaries and affiliates.





Home | Main Index | Thread Index

Comments to the Webmaster are always welcomed, please use this contact form . Note that as this site is a mailing list archive, the Webmaster has no control over the contents of the messages. Comments about message content should be directed to the relevant mailing list.