E-mail from Webmaster had a virus?!?

Thread Tools
 
Search this Thread
 
Old Jul 26, 2002 | 07:31 PM
  #1  
BlueFlareside's Avatar
Thread Starter
|
Senior Member
Joined: Jan 2000
Posts: 2,075
Likes: 1
From: Central Florida
E-mail from Webmaster had a virus?!?

I just received an e-mail from the webmaster with a virus. My Norton Antivirus caught it.

The subject was NOSHADE CLASS. There was no text in the message.

The attachment was ISPOPT.HTM (2.64 kb)

The virus was W32.Klez.H@mm. This is a version version of the WM.Niceday macro virus, but with a different, harmless payload macro.

I wondered if a virus got into your address book and sent them out to all of the members.
 
Reply
Old Jul 26, 2002 | 09:02 PM
  #2  
webmaster's Avatar
F150online
Founder
Joined: Nov 1996
Posts: 3,008
Likes: 0
From: Roswell, GA USA
Klez is an odd virus...while it may look like it came from me or my address book, it did not. "webmaster@f150online.com" is not even an actual email account, but a forwarding address (or alias), so there is no actual email box that exists by any name on any server or any client, anywhere. It is a technical impossibility for an account with the name of "webmaster@f150online.com" to even send a message.

What is likely to have happened is that someone that fell victim to Klez had "webmaster@f150online.com" as one of their contacts in Outlook and it sent messages that looked like they came from this account ... again, an account which does not actually exist. I've received a few of these myself and been perplexed.
 

Last edited by webmaster; Jul 26, 2002 at 09:23 PM.
Reply
Old Jul 26, 2002 | 09:42 PM
  #3  
BlueFlareside's Avatar
Thread Starter
|
Senior Member
Joined: Jan 2000
Posts: 2,075
Likes: 1
From: Central Florida
Steve,

I thought it was weird. I have gotten about 10 e-mails in the last week wiht this virus attached. I got one yesterday from cooltrucks@yahoo.com. Isn't there a member her anme cooltrucks?
 
Reply
Old Jul 26, 2002 | 10:02 PM
  #4  
webmaster's Avatar
F150online
Founder
Joined: Nov 1996
Posts: 3,008
Likes: 0
From: Roswell, GA USA
That sounds familiar...it looks like a frequent visitor to the site must have gotten Klez. (or someone that has harvested email addresses from the site)
 
Reply




All times are GMT -4. The time now is 12:57 AM.