HEADERS?

From: John Foust <jfoust_at_threedee.com>
Date: Tue Jul 30 21:44:01 2002

At 07:29 PM 7/30/2002 -0700, Fred Cisin (XenoSoft) wrote:
>Can somebody more familiar with such confirm whether that is indeed
>Richard Erlacher's machine that sent the following copy of Klez? (Headers
>only follow)

One trick of Klez is that it harvests e-mail addresses
from your mailboxes and uses them to spoof the From: line,
in order to make it seem (on casual inspection) that
person has the virus. They don't. Someone who received
mail from Erlacher (perhaps a list subscriber) has Klez.

- John
Received on Tue Jul 30 2002 - 21:44:01 BST