--WebTV-Mail-30524-9
Content-Type: Text/Plain; Charset=US-ASCII
Content-Transfer-Encoding: 7Bit
I wrote to the help desk at
Rootsweb.com. Here is the response I
received for those that are getting lots of blank emails.
Darlene
List Administrator
--WebTV-Mail-30524-9
Content-Disposition: Inline
Content-Type: Message/RFC822
Content-Transfer-Encoding: 7Bit
Received: from
smtpin-2104.public.lawson.webtv.net (209.240.213.114) by
asg-storefull-1111.public.svc.webtv.net with WTV-SMTP; Wed, 26 Jun
2002 13:41:58 -0700 (PDT)
Received: from
backup.rootsweb.com (
backup.rootsweb.com [63.92.80.50]) by
smtpin-2104.public.lawson.webtv.net (WebTV_Postfix+sws) with ESMTP
id 67E9BFEB2 for <dmohlsick(a)webtv.net>; Wed, 26 Jun 2002 13:41:58
-0700 (PDT)
Received: (from nobody@localhost) by
backup.rootsweb.com (8.10.1/8.10.1) id
g5QKfrO12374; Wed, 26 Jun 2002 14:41:53 -0600
Date: Wed, 26 Jun 2002 14:41:53 -0600
Message-Id: <200206262041.g5QKfrO12374(a)backup.rootsweb.com>
X-Authentication-Warning:
backup.rootsweb.com: nobody set sender to
donna(a)rootsweb.com using -f
To: dmohlsick(a)webtv.net
X-Msgnum: 192110
From: RootsWeb HelpDesk <helpdesk-post(a)rootsweb.com>
Reply-To: helpdesk-post(a)rootsweb.com
Subject: Re: Blank emails on Chandler-L and Chandler-D lists (Pat #192110)
A response to your Help Desk message, "Blank emails on Chandler-L and Chandler-D
lists," of Wednesday, 26 June 2002, at 2:34 p.m. follows:
-------------------------
Hi Darlene,
This sounds like virus activity -- probably Klez which spoofs/forges the
"From" Address. If they don't appear in the archives, then they weren't
sent through the list.
Anyone who received one of these "blank" emails should update their virus
DAT files immediately and then scan their computer for viruses. At least
one variant of Klez can infect simply by viewing the message in the preview
pane, if the user has not applied the security patch for Outlook Express.
Here is some info from Symantec about the Klez virus:
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html
Pat
-------------------------
To respond to this message, please press your 'Reply' button.
To post a question on a different topic, revisit the form located at
http://helpdesk.rootsweb.com/help.cgi
Thank You!!
--WebTV-Mail-30524-9--