ulvp@verizon.net?

The Fishing Geek · 01-07-2003, 07:44 AM

I've been getting viruses from what appears to be the above email address. Naturally, that's not the return address, but I have verified that it is actually coming from verizon.net and I believe that the user name is ulvp.

If this looks familiar, let me know. I know that they are an iFish user based upon the return addresses that the virus is using.

jet · 01-07-2003, 07:46 AM

Thanks for the warning.

Jet~~~

Corkie Monster · 01-07-2003, 08:48 AM

Will keep an eye out, Thanks

Silver Hilton · 01-07-2003, 08:52 AM

Hey, Dave, what kind of virus?

The Fishing Geek · 01-07-2003, 01:45 PM

Actually you are thinking of Outlook (the client) and not Exchange (the server). Viruses like Klez have their own code built into them so that they can mail themselves from your computer without the need to use a mail program like Outlook. Klez doez need Outlook (Express) to farm email addresses, though. Fortunately most everyone these days uses it.

Broadband users are especially dangerous because they have that "always on" connection that gives Klez and similar viruses the ability to send out emails whenever it wants, and the infected party never knows until they purchase/update antivirus software. Frustrating, really.

The Fishing Geek · 01-07-2003, 11:12 PM

I haven't actually scanned the file yet, but the attached file size is between 115k and 120k, which is just like the Klez viruses. I check my domain mail with a web mail client so when I see them I just delete them.

It IS a broadband user, though. It always is.

Silver Hilton · 01-07-2003, 11:41 PM

You think broadband use has correlation with the viruses? I thought it just had to due with MS_exchange usage (the commonly accessable address book) and folks without virus software.

I get a lot of incoming viruses from some of the mailing lists that I'm on. The virus is mailed to the list, i assume because it's captured in the address book by exchange.

Sea Nymph · 01-08-2003, 08:31 AM

I received a virus via email from "service@okumafishing.com" or at least that's what they claimed as their return address. I didn't look to see who their provider was.

Norton caught it before any damage was done.

SN

The Fishing Geek · 01-08-2003, 08:41 AM

Yeah, Klez can change the Reply To address. You'd have to look at the message header information to see where it REALLY came from.