[Vwdiesel] Re: [VW-TDI] Imposter using my address

Thu Jul 4 11:26:40 EDT 2002

In a message dated 7/3/02 6:37:05 PM Eastern Daylight Time,
emaglott at buncombe.main.nc.us writes:
<< That's the KLEZ virus.  It attacks ms outlook products and uses the email
 addresses in the address book to send itself out.  It takes another address
 from the address book and puts it in the FROM field. >>

That's what concerns me. I don't have MS Outlook. I have seen similar files
("A special powful tool", "A fun game", ) with nothing but a .zip file from
other addresses, all are deleted immediately except those from addresses I
recognize. I did NOT open the files attached to those either. I wrote back to
the "senders" whom I recognize asking what the file contained and the reply
they sent to me is the same as mine to you. The file was not sent by them.
Their message and unopened attachments were then also deleted.
I have also seen numerous messages from "root-host" of the audifans' vwdiesel
newsgroup stating that they have captured a virus being sent at times when
both of my computers are off and unplugged. Since the time stamp indicates
that the files were not sent from me, I can only presume that they were sent
to me.

<<Good news is there is no impostor using your email address.
Bad news is your computer is infected with a virus.>>
My units are not infected. Someone with my address in their address book is.

<<Something you can try is to view the "source" of that email with full
headers.>>
Anyone that wants to do some sleuthing can glean the information from this
mess that started me worrying;
<<This report relates to a message you sent with the following header fields:

  Message-id: <200207031539.g63Fd6D87868 at logs-wo.proxy.aol.com>
  Date: Wed, 03 Jul 2002 11:39:06 -0400 (EDT)
  From: jonbonbart <jonbonbart at aol.com>
  To: sswkv at vms.cis.pitt.edu
  Subject: A special  nice game

File:  rock.zip (43992 bytes)
DL Time (28800 bps): < 1 minute

This report relates to a message you sent with the following header fields:

  Message-id: <200207031539.g63Fd6D87868 at logs-wo.proxy.aol.com>
  Date: Wed, 03 Jul 2002 11:39:06 -0400 (EDT)
  From: jonbonbart <jonbonbart at aol.com>
  To: sswkv at vms.cis.pitt.edu
  Subject: A special  nice game

Your message cannot be delivered to the following recipients:

  Recipient address: sswkv at vms.cis.pitt.edu
  Reason: %MAIL-E-USERSPEC, invalid user specification '@PITT.EDU'

Action: failed
Status: 5.0.0 (%MAIL-E-USERSPEC, invalid user specification '@PITT.EDU')
Original-recipient: rfc822;sswkv at vms.cis.pitt.edu
Final-recipient: rfc822;sswkv at vms.cis.pitt.edu

Return-path: jonbonbart at aol.com
Received: from vms.cis.pitt.edu by vms.cis.pitt.edu (PMDF V5.1-10 #22606)
 id <01KJNOFMWG74A0WZMD at vms.cis.pitt.edu>
 (original mail from jonbonbart at aol.com); Wed, 3 Jul 2002 12:01:02 EST
Received: from rly-ip02.mx.aol.com ("port 62997"@[152.163.225.160])
 by vms.cis.pitt.edu (PMDF V5.1-10 #22606)
 with ESMTP id <01KJNODDWFMWA0X016 at vms.cis.pitt.edu> for
 sswkv at vms.cis.pitt.edu; Wed, 3 Jul 2002 11:59:18 EST
Received: from  logs-wo.proxy.aol.com (logs-wo.proxy.aol.com [205.188.200.6])
 by rly-ip02.mx.aol.com (v83.35) with ESMTP id RELAYIN7-0703115657; Wed,
 03 Jul 2002 11:56:57 -0400
Received: from Gtaumnkd (AC862116.ipt.aol.com [172.134.33.22])
 by logs-wo.proxy.aol.com (8.10.0/8.10.0) with SMTP id g63Fd6D87868 for
 <sswkv at vms.cis.pitt.edu>; Wed, 03 Jul 2002 11:39:06 -0400 (EDT)
Date: Wed, 03 Jul 2002 11:39:06 -0400 (EDT)
From: jonbonbart <jonbonbart at aol.com>
Subject: A special  nice game
To: sswkv at vms.cis.pitt.edu
Message-id: <200207031539.g63Fd6D87868 at logs-wo.proxy.aol.com>
X-Envelope-to: sswkv
MIME-version: 1.0
Content-type: MULTIPART/ALTERNATIVE;
 BOUNDARY="Boundary_(ID_bsBlM84VN2bxG9zzbGtCZg)"
X-Apparently-From: LoWMc7 at aol.com

<HEAD></HEAD>

Hello,This is a  nice game
This game is my first work.
You're the first player.
I hope you would enjoy it.

----------------------- Headers --------------------------------
Return-Path: <>
Received: from  rly-xj05.mx.aol.com (rly-xj05.mail.aol.com [172.20.116.42])
by air-xj05.mail.aol.com (v86_r1.15) with ESMTP id MAILINXJ53-0703120253;
Wed, 03 Jul 2002 12:02:53 -0400
Received: from  myriad.cis.pitt.edu (myriad.cis.pitt.edu [136.142.186.16]) by
rly-xj05.mx.aol.com (v86_r1.15) with ESMTP id MAILRELAYINXJ57-0703120212;
Wed, 03 Jul 2002 12:02:12 -0400
Received: from vms.cis.pitt.edu by vms.cis.pitt.edu (PMDF V5.1-10 #22606)
 id <01KJNOFVFIKWA0WYN9 at vms.cis.pitt.edu> for jonbonbart at aol.com; Wed,
 3 Jul 2002 12:01:13 EST
Received: from vms.cis.pitt.edu (PMDF V5.1-10 #22606)
 id <01KJNOFMWG74A0WZMD at vms.cis.pitt.edu>; Wed, 03 Jul 2002 12:01:04 -0500
(EST)
Date: Wed, 03 Jul 2002 12:01:04 -0500 (EST)
From: PMDF e-Mail Interconnect <postmaster at vms.cis.pitt.edu>
Subject: Delivery Notification: Delivery has failed
To: jonbonbart at aol.com
Message-id: <01KJNOFOYJHYA0WZMD at vms.cis.pitt.edu>
X-Envelope-to: jonbonbart at aol.com
MIME-version: 1.0
Content-type: MULTIPART/REPORT;
 BOUNDARY="Boundary_(ID_afc0s/MF2aC0gbHuC0lw3A)";
REPORT-TYPE=DELIVERY-STATUS>>