Re: Sending mail behind my back?

From: Aaron Margosis [MS] (aaronmaronline@microsoft.com)
Date: 07/07/02 

From: "Aaron Margosis [MS]" <aaronmaronline@microsoft.com>
Date: Sun, 7 Jul 2002 00:53:50 -0400

It could very well be the Klez virus on someone else's machine sending email
to these recipients and using your address as the sender. It's been a
popular virus for the past several months and difficult to stop since it's
hard/impossible to tell whose machine is actually infected. (Note that it's
as easy for someone else to send email as you as it is to send postal mail
and put your name and address in the return address area.)

"r.crowley" <rcrowley7@xprt.net> wrote in message
news:uifdjr2jjv1kf9@corp.supernews.com...
> Running Outlook 2002 (10.2627.2625). For the last 2-3 months I have been
> seeing email messages like this:
>
> The original message was received at Thu, 16 May 2002 08:34:49
> -0700 from pdx-ppp7.pop1.net [209.102.125.57]
> ----- The following addresses had permanent fatal errors -----
> thskan05@yahoo.co.kr
> ----- Transcript of session follows -----
> ... while talking to mx1.mail.yahoo.com.: >>> DATA
> <<< 554 delivery error: dd Sorry, your message to thskan05@yahoo.co.kr
> cannot be delivered. This account is over quota. -
mta578.mail.yahoo.com
> 554
> <thskan05@yahoo.co.kr>... Service unavailable
>
> These messages appear to indicate that something is sending messages from
my
> machine without my knowledge. These all appear to be addressed to
spammers,
> many (most?) in Korea.
>
> It should be noted that I continue to get copious amounts of spam in
> indecipherable (likely oriental) character-sets. Dunno where these fit
into
> the pattern: cause, effect, or both? I delete all of these without even
> previewing them. (Not that I could read them even with the proper font
> installed. :-)
>
> Anybody know what is going on here? Yes, I run anti-virus software
> (PC-Cillin) with the latest pattern file, and also just installed AdAware
> which found a suspicious registry entry and half a dozen questionable
> cookies. But none bore any resembelance to the offending URLs or domains.
>
> None of the bounced messages (or anything else I didn't initiate with my
own
> mouse) ever appear in the Sent folder.
>
> Is it time to dump Outlook in favor of something more crude and less
> automated? I'd rather go back to 80x24 character mode ASCII terminals
than
> have my computer doing stuff like this behind my back. You can have your
> "rich text" and binary attachments. Give me my computer back.
>
> Please let me know if there is a more appropriate ng for this topic.
> Thanks.
>
> Richard Crowley
> nix the numeral to reply
>
>

Loading