Virus Warning
Mark H. Bahr
koine at ev1.net
Tue Oct 8 09:14:44 EDT 2002
Klez is a virus that sends itself to all the addresses in the infected
computer's list with an address from that address book in the from line, it
has it's own SMTP engine. It's a nasty little bugger. Following is a link
to Norton's information on it as well as a cure. I haven't received it
because Norton as well as my provider stop it before it gets to me.
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.h@mm.html
Mark Bahr
Dallas, TX
> At 04:18 PM 10/6/2002 -0400, Philip E. Cleary wrote:
> >I just received a message addressed to the list with the subject
"Sincerely
> >yours." It was purportedly sent from jwrobie at mindspring.com. It is
infected
> >with the W32.Klez.H at mm virus.
>
> Sigh.
>
> I went in to the administrator's menu to put myself on permanent
> moderation, but it looks like Carl beat me to it. I think that will
prevent
> any further virus-laden messages from my address.
>
> These emails were not sent from my computer, but from someone who spoofed
> my address. There are several reasons I'm fairly sure this didn't
originate
> with my computer: (1) on Thursday, I was working at Almaden Research
> Center, which has security measure that prevented me from sending any mail
> at all, and some of these mails were sent at times I was simply not
> connected to the Internet; (2) Norton AntiVirus Corporate Edition, which
is
> running on my computer, detects the virus in the incoming mails and
deletes
> them without letting me read them, so I seem to be protected against this
> one; (4) I use Eudora, and Klez usually targets Outlook; (4) Norton also
> fails to find any viruses on my computer.
>
> The email headers for most of the mails seem indicate that they were sent
> by someone else:
>
> >Received: from Ubouymdex ([162.130.1.254]) by out016.verizon.net
> > (InterMail vM.5.01.05.09 201-253-122-126-109-20020611) with
SMTP
> > id <20021003173108.BUQK9318.out016.verizon.net at Ubouymdex>
> > for <b-greek at franklin.oit.unc.edu>;
>
> Some of the email headers are less clear.
>
> I'm not an expert on viruses, but I don't think this is coming from my
> computer. Regardless, Carl and I have put me on moderation so no new
> viruses slip out to the list, and I got the latest updates from Norton.
>
> Jonathan
>
>
>
>
>
>
> ---
> B-Greek home page: http://metalab.unc.edu/bgreek
> You are currently subscribed to b-greek as: [koine at ev1.net]
> To unsubscribe, forward this message to
$subst('Email.Unsub')
> To subscribe, send a message to subscribe-b-greek at franklin.oit.unc.edu
>
>
>
>
More information about the B-Greek
mailing list