[Elfsea] virus alert

[Timothy Rayburn]

As the hoster of ELFSEA.NET where Crandall handles his email, and as I know he uses it via a web interface, I can definitively say this did not come through Elfsea.Net.  Most likely this is a spoofed message, sent from someone who has both Maria and Crandall in their address book and who is using AOL for their primary access provider.  This honestly looks like KLEZ, a virus that replicates via spoofing messages like this.  The subject lines are from the persons email boxxes and hence would not be something you've ever encountered before.

Timothy of Glastinbury
Administrator of ELFSEA.NET & ANSTEORRA.NET

>Received: from vmf-ext.prodigy.net by vmf with SMTP; Fri, 20 Sep 2002
>00:43:19 -0400
>X-Originating-IP: [64.12.138.9]
>Received: from rly-ip05.mx.aol.com (rly-ip05.mx.aol.com [64.12.138.9])
>	by vmf-ext.prodigy.net (8.12.3 da nor stuldap/8.12.3) with ESMTP id
>g8K4hIGc148402
>	for <cehuse at sbcglobal.net>; Fri, 20 Sep 2002 00:43:19 -0400
>Received: from  logs-to.proxy.aol.com (logs-to.proxy.aol.com
>[152.163.204.2]) by rly-ip05.mx.aol.com (v87.21) with ESMTP id
>RELAYIN1-0920004230; Fri, 20 Sep 2002 00:42:30 2000
>Received: from Utycn (AC9AD737.ipt.aol.com [172.154.215.55])
>	by logs-to.proxy.aol.com (8.10.0/8.10.0) with SMTP id g8K4bSq62450
>	for <cehuse at sbcglobal.net>; Fri, 20 Sep 2002 00:37:29 -0400 (EDT)


--
= TECH KNIGHTS - "Your Techs In Shining Armor" =
Does your computer have problems?
Do you need new hardware for your computer?
Do you have a virus that you can't get rid of?
====== Call TECH KNIGHTS at 817-874-8264 =======

--