[RHCE] Someone has the Klez virus...

[Jim Thompson]

Hey gang,

We've recently gotten *several* Klez virus emails
trying to post to the RHCE list here at Trilug. As I'm
sure all of you know, the Klez virus works by culling
random email addresses from an infected Windows
computer and sending infected emails with forged
"from" headers based on the address information culled
from the infected computer. The result is a kind of
"two degrees of separation": there's a possibility
that the infected emails are coming from a machine
that one of us may know. I'm attaching the most recent
header info of our latest would-be Klez mailing in
case any of you know anyone who might be the infected
party.

Jim
************************************************


Return-Path: <comments@optionsnewsletter.com>
Delivered-To: rhce@trilug.org
Received: from optionsnewsletter.com (unknown
[130.94.71.5])
	by fatalpha.trilug.org (Postfix) with ESMTP id
F411EE5E7
	for <rhce@trilug.org>; Tue, 29 Oct 2002 13:53:34
-0500 (EST)
Received: from Iogomdlil [24.33.46.167] by
optionsnewsletter.com
  (SMTPD32-6.04) id A75EA01024A; Tue, 29 Oct 2002
13:45:50 -0500
From: kindra_kindra <kindra_kindra@hotmail.com>
To: rhce@trilug.org
Subject: Honey
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary=IH5i841THZw9EcF9d
Message-Id: <200210291345531.SM00284@Iogomdlil>
Date: Tue, 29 Oct 2002 13:45:53 -0500


__________________________________________________
Do you Yahoo!?
HotJobs - Search new jobs daily now
http://hotjobs.yahoo.com/