From: owner-edheads-digest@efohio.com (edheads-digest) To: edheads-digest@smoe.org Subject: edheads-digest V5 #212 Reply-To: edheads@efohio.com Sender: owner-edheads-digest@efohio.com Errors-To: owner-edheads-digest@efohio.com Precedence: bulk edheads-digest Monday, October 7 2002 Volume 05 : Number 212 Today's Subjects: ----------------- A special funny game [YourPalCM ] Strange Email [YourPalCM@aol.com] Re: Strange Email ["Ron Rosen" ] Re: Strange Email [YourPalCM@aol.com] Re: Strange Email ["Jim Merullo" ] Re: Strange Email ["Chris Varner" ] Re: Strange Email [rhiannon richard ] Re: Strange Email ["Ron Rosen" ] ---------------------------------------------------------------------- Date: Sun, 06 Oct 2002 06:30:42 -0400 From: YourPalCM Subject: A special funny game Hello,This is a special funny game This game is my first work. You're the first player. I wish you would like it. ------------------------------ Date: Sun, 6 Oct 2002 08:43:03 EDT From: YourPalCM@aol.com Subject: Strange Email It seems that everyone APPEARED to get a strange email titled "A Special Funny Game" from me at 6:30 a.m. this morning. I got the same email which appeared to come from me, because the list then sent it to me as it always does when you post a message. I have virus protection which I keep updated. I just ran Norton again and it found nothing. I don't download attachments, even from friends. I wasn't even awake at 6:30 this morning. It's all very strange. Anyway, just wanted to let everyone know. Sorry about that. Does anyone have any clue what that might have been about????? ------------------------------ Date: Sun, 6 Oct 2002 07:03:50 -0700 From: "Ron Rosen" Subject: Re: Strange Email > Anyway, just wanted to let everyone know. Sorry about that. > > Does anyone have any clue what that might have been about????? One of the characteristics of one of the recent viruses is that it invades someone's email and sends emails to others whose names appear there. The email that appeared to come from you was not itself a virus, but it was caused by a virus or worm that has affected someone's email. ------------------------------ Date: Sun, 6 Oct 2002 10:12:29 EDT From: YourPalCM@aol.com Subject: Re: Strange Email After doing a little research, it seems as if that email probably didn't even come from my PC, but rather someone who is infected who has me in their address book. It looks like the virus then sends itself to everyone IN your address book, and randomly selects one of the email addresses in the address book itself to disguise itself as the originator. The email that gets sent out DOES have the virus in an attachment, but because you can't send attachments through the EFO list, you all got the email but not the attachment with the virus in it. I would assume whoever has the virus must have me in their address book separately from the EFO list. I'm guessing I don't know many of you well enough to warrant a separate appearance in your address book, so that should narrow it down to who it might be that is infected. Your Pal, Chris Mal In a message dated 10/6/02 10:02:07 AM Eastern Daylight Time, ronsopas@earthlink.net writes: > One of the characteristics of one of the recent viruses is that it invades > someone's > email and sends emails to others whose names appear there. The email that > appeared > to come from you was not itself a virus, but it was caused by a virus or > worm that > has affected someone's email. ------------------------------ Date: Sun, 6 Oct 2002 10:22:16 -0400 From: "Jim Merullo" Subject: Re: Strange Email - ----- Original Message ----- From: I'm guessing I don't know many of you well > enough to warrant a separate appearance in your address book, so that should > narrow it down to who it might be that is infected. Outlook Express has the option to automatically add a name to the address book when you reply to a message. So, just by replying to this, your name is going into my address book. Since these viruses generally infect Outlook Express clients, it may not narrow the list down as much as you may think. I wish all these virus-writing nerds would pool their energy and use it for good instead of evil. Jim ------------------------------ Date: Sun, 6 Oct 2002 10:05:36 -0500 From: "Chris Varner" Subject: Re: Strange Email Yep, that's one of the Klez variants... probably Klez.h. Here's the CA record about that one http://www3.ca.com/virusinfo/Virus.asp?ID=11779. This is one of the viruses spread through some form of Outlook _or_ Internet Explorer (with Outlook, as usual, being the main culprit..). > I wish all these virus-writing nerds would pool their energy and use it for > good instead of evil. They are doing a good job of pointing out how bad Microsoft's code is -- now if everyone would just stop BUYING it... :) -c ------------------------------ Date: Sun, 06 Oct 2002 11:53:07 -0700 From: rhiannon richard Subject: Re: Strange Email Norton will usually catch these viruses for you. I probably receive one almost every day. However, if you don't have a virus detection program, then they are still easy to see. When you get an attachment, just think "would my friends REALLY type like that?" They are usually really stupid and poorly written. And they are frequently repeated. - -rhiannon who is very happy about upcoming NC shows!!!! At 10:05 AM 10/6/2002 -0500, Chris Varner wrote: > Yep, that's one of the Klez variants... probably Klez.h. Here's the CA > record about >that one http://www3.ca.com/virusinfo/Virus.asp?ID=11779. This is one of the >viruses spread through some form of Outlook _or_ Internet Explorer (with >Outlook, >as usual, being the main culprit..). ------------------------------ Date: Sun, 6 Oct 2002 09:46:59 -0700 From: "Ron Rosen" Subject: Re: Strange Email > Norton will usually catch these viruses for you. I probably receive one > almost every day. However, if you don't have a virus detection program, > then they are still easy to see. When you get an attachment, just think > "would my friends REALLY type like that?" They are usually really stupid > and poorly written. And they are frequently repeated. Yes, I receive one every day or two. I set my email reader so that I can see the number of KB in a message. The virus-bearing messages tend to be 120-150KB. Typically they are 123KB. Anything that looks suspicious and has a lot of KB gets trashed. ------------------------------ End of edheads-digest V5 #212 *****************************