[Elfsea] virus alert

[Timothy Rayburn]

Very simple to explain really.  The 'From' address on an email is no more proof it came from someone than a return address on an envelope is.  While most mail programs automatically fill in your information, mail servers act just like mail boxes and will deliver mail that is sent to it, regardless of what is on the outside of the enevelope (a little simplistic but mostly true).  As such viruses on a computer that knows both your address and Crandall's address could fill out your address as the 'To' and Crandall as the 'From' and not put their information anywhere.  Just as if you recieved a letter, you'd assume it was from the person who was listed as the return address, but in fact someone malicious could have falsified the envelope entirely.  Get it?

Timothy


---------- Original Message ----------------------------------
From: "CE Huse/Lady Maria Cabeca de Vaca" <cehuse at sbcglobal.net>
Reply-To: elfsea at ansteorra.org
Date:  Sat, 21 Sep 2002 23:03:08 -0500

>Ok, be patient with me here...I'm a little computer stupid on this.  When I
>received the e-mail, it said it was from Crandall and it has Crandall's
>e-mail addy in the "from" section. When I hit the reply button, it also put
>Crandall's email addy in.
>
>So, does this mean that someone else is using his e-mail address? Could you
>enlighten those of us not so gifted with the technicalities of e-mail and in
>plain simple english?
>
>Maria
>
>> -----Original Message-----
>> As the hoster of ELFSEA.NET where Crandall handles his email, and
>> as I know he uses it via a web interface, I can definitively say
>> this did not come through Elfsea.Net.  Most likely this is a
>> spoofed message, sent from someone who has both Maria and
>> Crandall in their address book and who is using AOL for their
>> primary access provider.  This honestly looks like KLEZ, a virus
>> that replicates via spoofing messages like this.  The subject
>> lines are from the persons email boxxes and hence would not be
>> something you've ever encountered before.
>>
>> Timothy of Glastinbury
>> Administrator of ELFSEA.NET & ANSTEORRA.NET
>
>_______________________________________________
>Elfsea mailing list
>Elfsea at ansteorra.org
>http://www.ansteorra.org/mailman/listinfo/elfsea
>

--
= TECH KNIGHTS - "Your Techs In Shining Armor" =
Does your computer have problems?
Do you need new hardware for your computer?
Do you have a virus that you can't get rid of?
====== Call TECH KNIGHTS at 817-874-8264 =======

--