virus question

[John Lowther]

primary question: is KLEZ windows specific?

2ndary stuff (not OS X specific so feel free to ignore)
        it *seems* someone out there has KLEZ and so every time i check 
mail there are between 3 and 10 bounce messages being returned to me 
because some address "I" wrote to no longer exists.  or i'm blacking 
out and then promising people i don't know that i can help them lose 
weight.  i wrote to earthlink, trying to figure out how to deal with 
this, they wrote back as follows;

***********
Thank you for contacting us.

We have gone through your issue regarding the bounced back emails which 
were not sent by you. This sounds like someone you know is infected 
with the KLEZ virus.  The W32/Klez variant virus has the ability to 
spoof the email FROM: field. The sender's address used by the virus is 
one that was found in the infected user's email address book. Thus, it 
may appear that you have received this virus from one person, when it 
was actually sent from someone else.

Viewing the entire email header will display the actual senders address.
**********

...hi, i'm back
.................so here is what i am unclear  about. they tell me that 
viewing the entire email header will reveal the true sender (afflicted 
machine).... ok, but when i look at a variety of the headers on these 
bounced messages i can't figure who this afflicted sender is (there is 
one below if anyone else knows how to divine this information)

....and a final curiosity... CHECK OUT THE WORD SALAD and or 
experimental poetry that someone might have received from 'me' .... 
very funny

**********
From: System Administrator <postmaster at HQ.csir.res.in>
Date: Thu Aug 21, 2003  9:22:30  PM US/Eastern
To: j.lo at EARTHLINK.NET
Subject: Undeliverable: arlen
Status: U
Return-Path: <>
Received: from csir.hq.csir.res.in ([203.197.211.3]) by penguin 
(EarthLink SMTP Server) with ESMTP id 19Q0yZ5m83NZFl40 for 
<j.lo at earthlink.net>; Thu, 21 Aug 2003 18:18:00 -0700 (PDT)
Received: by csir.res.in with Internet Mail Service (5.5.2653.19) id 
<R2TNSLRQ>; Fri, 22 Aug 2003 06:52:31 +0530
Message-Id: <B5BFCFC4F9E2614684EDF387AD9EBC243A141E at csir.res.in>
Mime-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
X-Ms-Embedded-Report:
Content-Type: multipart/mixed; 
boundary="----_=_NextPart_000_01C3684B.DB6CE0CC"

Your message

   To:      j.lowrey at sgi.com
   Subject: arlen
   Sent:    Fri, 22 Aug 2003 06:31:54 +0530

did not reach the following recipient(s):

j.lowrey at sgi.com on Fri, 22 Aug 2003 06:52:30 +0530
     The recipient name is not recognized
	The MTS-ID of the original message is: c=us;a=
;p=csir;l=CSIR0308220106R2TNSKSL
     MSEXCH:IMS:csir:HQ:CSIR 3550 (000B09AA) 550 5.1.1 
<j.lowrey at sgi.com>...
User unknown



From: Louis Malcolm <j.lo at EARTHLINK.NET>
Date: Thu Aug 21, 2003  9:01:54  PM US/Eastern
To: j.lowrey at sgi.com
Subject: arlen


megalomaniac potash millennia adornment barth bodyguard tao hushing
corroborated acerbity adds scenario bluegill criticizing terminally 
courage
testament couched cortical methodologists scuffling plotting humorers
hungered euthanasia postures expository hypothesized blustery popularly
hosiery possemen arachne hostelry teeth teammate explorer exorcist 
teamed
hoppers posterior courtesan anglican bergen scow boyfriend argonne
bombarding maturely televisions postponing matins hungering sculptures
tensed hunters idempotent accusingly achievement tatting playgrounds 
adject
angeles excels covenants excepted adverb meager exhortations plunderers
pottery cradle horned mental bombard cotty alameda maturate admonishing
scalp cramming adduces post

  <http://srd.yahoo.com/drst/borrowers/*http://www.infobizcom.com/x33>

breached tangle medallions exerting hydrant teletypes memorableness 
midpoint
tattoo mercuric membership medicine microprocessors anita menacing 
accessor
auriga meting crews tearful portions tautly bombers acrobat meridional
screech april illegal horrors possession immaterially breakables 
acoustical
polytechnic adipic humid illustrious mechanical aires atreus cropper 
mawkish
ponderous crib acts berkeley pleaded sax maximal crochets brands saved
bendix advantageous talkative credulity benz merchandising excision 
maximal
ave booklets bourgeois hoppers tangled plebiscites meetings hyphen
administration everywhere bottomed bowel bellatrix excretes brazenness 
sandy
exiling agricola eventuate sealevel poncho mezzo exporters