Re: "Undelivered Mail..." has me pulling my hair out!

by Bob Unger <rbu(at)cirex.net>

 Date:  Fri, 07 Jun 2002 21:04:55 -0400
 To:  hwg-techniques(at)hwg.org
 References:  cirex
  todo: View Thread, Original
Wow - I received quite a few responses from people who are in the same Klez 
boat as me.  Glad I'm not alone!
;-)
All the responses seemed to boil down to the same assumption - one's 
computer does not have to be infected with Klez in order to reap the anguish.

So, I'm thinking one way of fighting this invasion is to filter the subject 
line - which is usually an auto response from an ISP - with all the 
variations of "Undelivered Mail..."

Of course this might trash any messages I send with a typo in the address 
field and gets returned to me, but I haven't made that mistake to many times.

Bob Unger
rbu(at)cirex.net


>>For the last few weeks I have been bombarded by "Undelivered Mail 
>>Returned to Sender" messages.  I get around 20 to 30 a day saying it's 
>>returned to me because it's infected with Klez - or the recipient doesn't 
>>accept attachments, etc.... all kinds of reasons.  But most of the 
>>"undelivered" address's are not in my address book (I use Eudora) and all 
>>the messages have my address in the "from" field.
>>
>>I've scanned my disk with Norton and it comes up clean - yet I am getting 
>>all these "returned mails" with my address on it.
>>
>>How does Klez work?  Is Klez grabbing my address from other peoples 
>>address books that are infected with the virus - and then I get the 
>>returned mail?  Is there ANYTHING I can do to stop getting all these 
>>"returned" messages???????
>>
>>The kicker to all this is, is that it's using my brand new email address 
>>that I've had for just about a
>>month now.  It's driving me insane!
>>
>>Bob Unger
>>rbu(at)cirex.net

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA