Have a funny Christmas virus
	Below is the Header info for a virus received from an AOL subscriber whose computer is infected with the Worm.Klez virus. The AOL customer's computer was trying to send out the email to everyone in it's Address Book. The AOL customer's computer identified itself as BobFisherChev -- The Klez virus randomly selects another email address taken from its Address Book. Problem #1: AOL is allowing customers to use a From line that's not AOL. AOL should restrict the customers to use their assigned @aol.com email addresses. Problem #2: Even though the email clearly did not originate from BobFisherChev@<our 1USA domain> (protected here due to SpamBots that may capture the real email address), the AOL system sent the Return Notice to our customer. This should be fixed. The AOL system also included the virus in the Return Notice. This should also be fixed!! Good Thing #3: 1USA protects its customers from incoming viruses - even in Return Notices sent by other Services. In this case, AOL. (Some people (at other ISPs) are inquisitive and might say Gee... I don't remember sending an email in the first place... and are tempted to open this email.) Bad thing #4: If the recipient of the message reads "Have a funny Christmas" subject line, their computer would then become infected with the Worm.Klez virus. This is how viruses are spread. The solution: A. Every ISP should improve their service to their customers and offer virus protection on the Mail Servers - like 1USA does. B. Every ISP should offer Free Antivirus Software to their customers, to protect them from catching viruses while web surfing - like 1USA does.     Here is the Header from the infected email:
	Reporting-MTA: dns; rly-ip04.mx.aol.com Arrival-Date: Sun, 15 Dec 2002 09:57:52 -0500 (EST) Final-Recipient: RFC822; jsmith@somewhere.com Action: failed Status: 5.1.1 Remote-MTA: DNS; mail.somewhere.com Diagnostic-Code: SMTP; 550 jsmith@somewhere.com unknown user account Last-Attempt-Date: Sun, 15 Dec 2002 09:58:32 -0500 (EST) --JAB14990.1039964313/rly-ip04.mx.aol.com Content-Type: message/rfc822 Received: from logs-mtc-th.proxy.aol.com (logs-mtc-th.proxy.aol.com [64.12.102.5]) by rly-ip04.mx.aol.com (v89.10) with ESMTP id RELAYIN8-1215095752; Sun, 15 Dec 2002 09:57:52 -0500 Received: from Awxnibkpk (ACA1E46B.ipt.aol.com [172.161.228.107]) by logs-mtc-th.proxy.aol.com (8.10.0/8.10.0) with SMTP id gBFEwgB266390 for <jsmith@somewhere.com>; Sun, 15 Dec 2002 09:58:42 -0500 (EST) Date: Sun, 15 Dec 2002 09:58:42 -0500 (EST) Message-Id: <200212151458.gBFEwgB266390@logs-mtc-th.proxy.aol.com> From: bobfisherchev <bobfisherchev@usa.com> To: jsmith@somewhere.com Subject: Have a funny Christmas

Goto the 1USA Home Page at least once per week. The new features will be in the What's New section.

1USA Link Exchange

	1USA Newsletters for our customers (You can forward these to your friends who use other ISPs if you wish....using the Links on each page
	The Newsletters Archive has been broken down into individual News Stories, and available Here. . . . Here's some older Hot News for 1USA Subscribers Are you SURE you want to use an AutoResponder? - 030210 A security issue has been identified in Microsoft software that could enable an attacker to read files or run programs on a computer when you visit the attacker's Web site. - 030205 Fake eBay email that requests your account information - 030122 Opinions on Pop-up Banner Ads - 030122 What are the features of a great MailServer? - 021228 About the "Have a happy Christmas" virus - 021220 Getting Windows95 or Windows98 to save your Login Password - 021217 Unable to log into Bank's website? Unable to have Live Stock Market feeds, etc.? You may need Windows Dialer 1.4 - 021217   9/24/2001     9/18/2001     9/13/2001     8/28/2001     8/6/2001       7/7/2001 7/21/2001                   6/30/2001    6/23/2001    6/17/2001    6/9/2001    6/6/2001    6/1/2001     5/31/2001    5/17/2001    5/11/2001     5/1/2001     4/27/2001

1USA Link Exchange