[Groop] Re: "Hi" Virus

[Gary Grossmann]

ME wrote:

The other possibility is that the infected e-mail didn't come from
you.  As it says on the page I linked to at McAfee, the e-mail's
return address is often spoofed.  A virus of this sort scours the
infected machine for e-mail addresses and sends itself to each one it
finds...but it may also insert one of those found e-mail addresses in
the "From" line.

The scenario would go like this: Someone who has your e-mail address
somewhere on his computer (possibly a member of the Groop here) gets
infected.  The person also has the groop at groo.com address on his
computer.  So it sends the infected message to the Groop address and
puts your [Gary's] address in the "From" space.

We might be able to find out for sure if this happened if we could
examine the header on the infected message.  I've already deleted my
copy of it but if you or someone still has a copy around, we could
check the header.  Since the infected messages that came to us came
from groo.com, the header would have all that information in it.  But
it might also have the info from the original message as it received
it.

----------------------------------------------------------------------------
----------------------

I deleted mine right away.  Does anyone still have theirs?  -Gary G.