Sobig Virus from Newtek - NOT!

[ballew]

I recieved an email containing the Sobig virus this evening that origianted from an ip address registered to Newtek using a unique email address that has only been given to Newtek.

The header info is:

Received: from unknown (HELO BILLYP) (207.235.86.2)

Somebody needs to check BillyP's computer.

I didn't email this to Newtek because I didn't want to furnish another email address that I will need to block which would be targeted by an infected computer .

Craig Ballew

[Chuck]

Craig, there is no current address "billyp". Both spammers and virus spreaders very commonly spoof addresses, and have done so in this case. I have received spam and virus emails (my anti-virus software deletes the viruses but preserves the email so I can see where it came from) that were spoofed from a number of NewTek emails past and present, including my own address, and my email and system are in fact clean and free of viruses.

[mattclary]

Yep, it's pretty common to get e-mails from spoofed addresses.

[WizCraker]

Like 100% of spam is spoofed.